irina_api

[eternal reef]

👋 Welcome to your new thread!

⏲️ We'll be here soon! Typically we respond in a few minutes, but sometimes we might take a bit longer if the server is busy or if you have a particularly tricky question.

⏱️ We close idle threads, which makes them read-only. Once a thread is closed it won't be reopened, but you can always start a new thread if you have another question.

🔗 This thread will always be available, even after it's closed. You can find it again using Discord's search, or you can save this link: https://discord.com/channels/841573134531821608/1487027323420016680

📝 Have more to share? Add more details, code, screenshots, videos, etc. below.

[echo pond]

Update your pricing where, exactly? Which platform are you referring to?

[dawn rapids]

hi @echo pond thanks for your response.
I ve uploaded my course on Ezycourse.com platform.

this error appears all the time.

and thats whats ezycourse team says to me

[echo pond]

Yeah hard to know the exact cause of the issue here as we've no insight into how that platform integrates with Stripe

Based on their message, it sounds like that there's an key on your Stripe account that you provided to them (the platform) in order for them to perform actions on your Stripe account. Does that sound familiar?

This: https://docs.stripe.com/keys-best-practices#limit-access

[dawn rapids]

yes, I copied a API key on my stripe. and paste it to Ezycourse.

[echo pond]

Do you happen to know your Stripe account ID (acct_xxx)?

[dawn rapids]

Yes, I know my stripe account

[echo pond]

I can check the logs to see:

• What key is being used
• What permissions are missing

[echo pond]

Can you share it here?

[dawn rapids]

sure. Wait. Let me look for my ID

https://dashboard.stripe.com/org_6TbeZKMBFI8yz2xNY5nB2ie

[echo pond]

Can find it here: https://dashboard.stripe.com/settings/account

[dawn rapids]

acct_1SSGdEBbG11nMhDs

[echo pond]

Taking a look

Hmm, are you sure that's the right account? No real activity on there since January

[dawn rapids]

I ve got two account, but one main.
And I tried shared with Ezy from German Account my API.
The last sales were done in Jan I believe

[echo pond]

Struggling to find any errors conducive of that issue they describe on either account. Still looking

[dawn rapids]

ok. Thank you so much. Highly appreciated.

[echo pond]

In your Dashboard, are there any errors in the logs? https://dashboard.stripe.com/workbench/logs

[dawn rapids]

let me see

I cant see any errors.

[echo pond]

Yeah I think the issue isn't what that platform describes, at least not on those Stripe accounts

[dawn rapids]

what shall I do now?

shall I pass the ball back to them? 🥲

[echo pond]

You need to go back to them unfortunately. They say that the secret key doesn't have the correct permissions, which can't be true - secret key(s) have all the permissions

At first I suspect that they might have been describing a restricted key (what I linked above), which can have limited permissions. But there's no such keys on acct_1SSGdEBbG11nMhDs

If you've provided them with an sk_live_xxx key, they should be able to make all API requests on your account(s) without a permission error

[dawn rapids]

Can you write me a text which I can forward to them please?
I am not an IT person. 🙂

[echo pond]

For example, heres a recent request from the other account where you're creating a new price: https://dashboard.stripe.com/acct_1N03VGE0nN96uPPv/logs/req_HzByEzTIHItURi

I suspect that's also initiated by their platform?

[dawn rapids]

yes, that was probably me. I tried to update a price for my products.

[echo pond]

You need to explain to them that you've spoken to Stripe who can see no evidence of API permission errors on the two Stripe accounts you've shared. I'd ask them:

• To confirm which key(s) they're using
• Confirm which API requests they're making to Stripe that fail

I'd also check that the key you've provided them with is actually a valid key from your Dashboard

[dawn rapids]

https://dashboard.stripe.com/acct_1SSGdEBbG11nMhDs/apikeys

I did provide the standard keys.
First the published key and after the secret key

[echo pond]

Yeah I can see all them. But you need to check that the one they you've set in their platform is actually a key listed here

[dawn rapids]

wait please

[echo pond]

Also, overall, they shouldn't be using your API keys directly. We strong discourage that

[dawn rapids]

I fillwed in here the published and secret key. I can do it one more time and press on update.
Do you want me to do it?

[echo pond]

Sure, worth a try

[dawn rapids]

ok. wait a sec.

[echo pond]

It'll be the secret key that is an issue I think, based on what you're trying to do

[dawn rapids]

let me try.

strange it does not accept now

[echo pond]

Yeah that's not the key. You want the part that looks like sk_live_xxx. you'll likely need to generate a new one as once they've been generated they can't be accessed again

[dawn rapids]

I see. How do I generate a new one?

[echo pond]

https://docs.stripe.com/keys#create-an-api-key

[dawn rapids]

I got connected our online shop with the key before. If I generate a new one, will it stay still connected or do I need to update the key also on the online shop?

[echo pond]

No, creating a new key won't expire the old ones. You can have multiple active

We recommend storing them somewhere safe, outside of Stripe:

In live mode, Stripe only shows you the API key one time (for security purposes). Store the key in a place where you won’t lose it. To remind yourself where you stored it, you can add a note on the key in the Dashboard. If you lose the key, you can rotate or delete it and create another.

[dawn rapids]

I see. ok.