adityaj-connected-account-test-keys | Stripe Developers | Page 1

iron knoll Oct 14, 2021, 7:41 AM

#

Hello, the use of API keys for connect accounts are strongly discouraged due to potential security risks, the recommended method is via the Stripe-Account header, for more information, please refer to https://stripe.com/docs/connect/authentication

fallen lintel Oct 14, 2021, 7:52 AM

#

i need both keey at the time of onboarding

#

actually we are creating stripe woocommerce plugin

#

onboarding client via stripe connect

#

further all transactions on his strore will be done using clients keys.

plucky narwhal Oct 14, 2021, 9:01 AM

#

Hello, which type of Connect Account are you using? Ie Express/Standard/Custom. And How are you onboarding? ie Onboarding flow vs OAuth

#

Can you share the guide / document that you are following?

#

Generally as my colleague makoto mentioned, directly using and storing keys is discouraged

fallen lintel Oct 14, 2021, 9:39 AM

#

Standard Account
using OAuth

plucky narwhal Oct 14, 2021, 9:41 AM

#

On this step, after calling Token, you should have refresh_token and access_token: https://stripe.com/docs/connect/oauth-standard-accounts#token-request

Using OAuth with Standard accounts

Use the OAuth connection flow to allow a Standard user to connect to your platform.

#

This flow is still supported, so it's up to you to utilize it, but keep in mind that we recommend the Connect Onboarding flow instead, and you won't need to store your user's keys

fallen lintel Oct 14, 2021, 9:48 AM

#

is there any endpoint to retrieve test_keys from referesh_token or live access_token

#adityaj-connected-account-test-keys