#RMoura_JS-3DS2
umbral ocean
on the normal 3d secure I can access the redirect link with this keys responsenext_action.use_stripe_sdk.stripe_js
but with the 3ds2 theres no clear url
acoustic harbor
How are you creating this link?
umbral ocean
No Im creating a payment intent that is returning a status of requires actions
I thought it would appear in the three_ds_method_url porperty
acoustic harbor
Ah because it does for 3DS but not 3DS2?
umbral ocean
yeah
acoustic harbor
Do you have the request id for that?
umbral ocean
yes
acoustic harbor
Send it when you can please
umbral ocean
pi_3Jf5AAIGDBqjniob0mJRvC0V
acoustic harbor
Thank you
charred flame
@umbral ocean you should never send the internal URL of the PI to a customer over email
instead, you should be sending them a URL to come to your own website
You would be showing some kind of "payment summary" about what they are about to pay, where they could enter card details if needed and your code can use Stripe.js to confirm the PaymentIntent
charred flame
3DS2 doesn't matter in the flow I describe
umbral ocean
hmmm ok
charred flame
you get the customer on your own website, and there, in Javascript you call confirmCardPayment() and we do the rest, 3DS2 or not
we will show a modal if needed and do the device fingerprint/3DS2 auth without you having to do anything except call that confirm the way you do for normal payments
umbral ocean
Ok, the problem is the platform I have recently started working on is doing subscriptions "manually" instead of using the default subscriptions from Stripe. That is, running a cronjob that starts a task of payment intent, so there's no input. I know it's not the best way but I'm not here to change how they implemented things; I'm just giving some feedback via email to the user. In the case of 3d secure, it was easy since the response includes a redirect link, and I just wanted to know if 3d secure 2 had something like that. But from this chat, I'm guessing it's a no.
Thank you anyway :).
charred flame
In the case of 3d secure, it was easy since the response includes a redirect link
it's mostly that this was a really bad idea 😦
that URL is not guaranteed to last and so a customer could click on it and get nowhere
umbral ocean
true :/
In the email i think ill send something like. this link may have expired or something like that
its a workaround for sure...