ralphsaridar-ReactNative | Stripe Developers | Page 1

distant cove Nov 17, 2021, 8:08 AM

#

past torrent Nov 17, 2021, 8:08 AM

#

hello

distant cove Nov 17, 2021, 8:08 AM

#

Hi

past torrent Nov 17, 2021, 8:09 AM

#

Ive followed the youtube video on stripe/reat-native-stripe

#

every step

#

yet I still receive an error with the sk

distant cove Nov 17, 2021, 8:09 AM

#

Can you check your Dashboard Request log, and find the request that failed?

past torrent Nov 17, 2021, 8:09 AM

#

one sec

#

where can I check this

#

the requests

distant cove Nov 17, 2021, 8:09 AM

#

https://dashboard.stripe.com/test/logs

past torrent Nov 17, 2021, 8:10 AM

#

ok

#

what should i show you

#

POST /v1/charges
Status
400 ERR
ID
req_3fWDmXLUW8z3Fn
Time
8/11/21, 11:48:57 am
IP address
150.107.241.206
API Version
2020-08-27
Latest
Source
Stripe/v1 NodeBindings/8.170.0
Idempotency
Key – 84daf3f4-30ec-4cad-9ea7-b4601824c887

token_already_used
You cannot use a Stripe token more than once: tok_1JtUSDGCJMztZgE066vMEqKJ.

Was this useful?

Yes

No
{
"description": "CashMyStock",
"amount": "18900",
"currency": "usd",
"source": "tok_1JtUSDGCJMztZgE066vMEqKJ",
"capture": "true",
"metadata": {
"order_id": "34"
}
}
Response body
{
"error": {
"code": "token_already_used",
"doc_url": "https://stripe.com/docs/error-codes/token-already-used",
"message": "You cannot use a Stripe token more than once: tok_1JtUSDGCJMztZgE066vMEqKJ.",
"type": "invalid_request_error"
}
}
Request POST body
{
"description": "CashMyStock",
"amount": "18900",
"currency": "usd",
"source": "tok_1JtUSDGCJMztZgE066vMEqKJ",
"capture": "true",
"metadata": {
"order_id": "34"
}
}

Error codes

Learn more about common error codes and how to resolve them.

#

what went wrong

#

@distant cove

distant cove Nov 17, 2021, 8:22 AM

#

Let me take a look

past torrent Nov 17, 2021, 8:22 AM

#

deal thank you

distant cove Nov 17, 2021, 8:23 AM

#

This is a server request

#

the error is also different than "invalid secret key" that you have mentioned

#

I think this is a different problem, but shall we focus on the failed ConfirmPayment first? It would appear as a request from client

past torrent Nov 17, 2021, 8:25 AM

#

so error from both front and back end ?

distant cove Nov 17, 2021, 8:31 AM

#

There could be different errors

past torrent Nov 17, 2021, 8:33 AM

#

thats the video I followd

#

https://www.youtube.com/watch?v=SH2bi-1MUNM&t=537s

YouTube

Stripe Developers

Confirm a card payment with Stripe React Native

In this episode, you'll learn how to confirm a card payment with the stripe-react-native client library in an expo based React Native application. Thor covers how to use the CardField component.

This episode builds on the previous episode about setting up a React Native application with Stripe: https://youtu.be/qiEwO_UrOro.

Table of conten...

▶ Play video

#

same concept as it is written

#

is it possible that I receive this error because of an error on the backend ?

#

Response body
{
"error": {
"code": "token_already_used",
"doc_url": "https://stripe.com/docs/error-codes/token-already-used",
"message": "You cannot use a Stripe token more than once: tok_1JtUSDGCJMztZgE066vMEqKJ.",
"type": "invalid_request_error"
}
}

Error codes

Learn more about common error codes and how to resolve them.

#

this error

distant cove Nov 17, 2021, 8:41 AM

#

Okie I see

#

Please delete or redact above message

#

you wouldn't want your key exposed here as a public space

#

So that value sk_test_xxx is a Secret key and should only be used in server

#

on client (React Native) you want a client_secret key, which is a secret from a PaymentIntent, but safe to be handled on client side

#

Can you share the code you use to obtain PaymentIntent from the server?

past torrent Nov 17, 2021, 8:43 AM

#

paymentIntent should be done from the server side correct ?

distant cove Nov 17, 2021, 8:50 AM

#

yes

past torrent Nov 17, 2021, 8:52 AM

#

will send it just give a bit of time

#

because im the front end developer

#

im contacting the backend

distant cove Nov 17, 2021, 8:55 AM

#

Anw, can you share again where are you seeing that "invalid secret key"? with actual value redacted?

past torrent Nov 17, 2021, 8:58 AM

#

yes

#


      confPay = async() =>{
              //console.log(stripePk.)
              const {error} = await confirmPayment(props.token,{
                  type:'Card',
                  billingDetails:{
                      email:'joe@hotmail.com'
                  }
              });
              if(error)
                  console.log("Error: ",error.message)
              else
                  Alert.alert("Payment","Successful")
              //apiPayment.complete
      }

#

if(error) console.log("Error: ",error.message) thats where it is logging it

#

I will send you the log one second

#

Error: Invalid client secret: sk_test_1234567890

distant cove Nov 17, 2021, 9:03 AM

#

ok, that value comes from the props.token, isn't it? Where are you taking that props.token?

past torrent Nov 17, 2021, 9:05 AM

#

yes

distant cove Nov 17, 2021, 9:05 AM

#

Where are you getting that value from?

past torrent Nov 17, 2021, 9:06 AM

#


        APIPayment.getClientToken().then((res)=>{
          this.setState({payment_token:res})
        })


then

    
            <OverlayComp 
                  ref={this.paymentRef}
                  visible={true}
                  token={this.state.payment_token}
                  onClose={()=>this.setState({overlay:false})}
                  onchange={(t)=>this.changeData(t)}  />

#

so mainly im getting the value from the backend

distant cove Nov 17, 2021, 9:07 AM

#

okay, so backend is returning wrong value

#

We will need to see how is backend implementing this method

past torrent Nov 17, 2021, 9:37 AM

#

1 second

past torrent Nov 17, 2021, 10:14 AM

#

what the backend developer is doing

#

in the function is just returning the string of pk_test_

#

sk_test

#

nothing else

distant cove Nov 17, 2021, 10:18 AM

#

Ok, there are 2 incorrect things

past torrent Nov 17, 2021, 10:18 AM

#

developer is sending back the secret_key that he gets from stripe after creating the account

distant cove Nov 17, 2021, 10:18 AM

#

Backend should return the Publishable Key (pk_xxx) instead of the Secret Key (sk_xxx). The Secret key should never been exposed to client by any mean

past torrent Nov 17, 2021, 10:19 AM

#

ok I already have my publish key in front end in an .env

distant cove Nov 17, 2021, 10:20 AM

#

Hmm ok? So the function from backend should return the client_secret of a PaymentIntent

#

It's a different thing than both Secret Key and Publishable Key

#

https://stripe.com/docs/payments/accept-a-payment?platform=react-native&ui=custom#react-native-create-server-side

Accept a payment

Securely accept payments online.

#

For example in Node js

const paymentIntent = await stripe.paymentIntents.create({
  amount: 1099,
  currency: 'jpy',
});
const clientSecret = paymentIntent.client_secret

#

It's a client_secret created per PaymentIntent, not the secret key of the account

past torrent Nov 17, 2021, 10:23 AM

#

ok just a question

#

so I as a front end developer should send him the data for the amount and currency

#

and in return I receive the clientSecret correct ?

#

in order to continue on

distant cove Nov 17, 2021, 10:25 AM

#

That could work, be generally you don't want client to send amount/currency to server, but the server to pre-define it

past torrent Nov 17, 2021, 10:25 AM

#

proccess goes : ```
I send POST request (Front)
I receive data back (Back)
I send POST request (Front)

past torrent Nov 17, 2021, 10:26 AM

#

distant cove That could work, be generally you don't want client to send amount/currency to s...

shouldn't amount and currency be dynamic data?

distant cove Nov 17, 2021, 10:26 AM

#

Because, a customer and send fake amount to your server, then get result and use your service with $1 for example

#

If you allow your client to define amount/currency, any customer can reverse-engineer your app and try to send fake amount, to exploit your system

past torrent Nov 17, 2021, 10:27 AM

#

hmm so how does have to be

distant cove Nov 17, 2021, 10:27 AM

#

Define amount/currency on server

#

I need to step down for the day. My colleague @sacred wing would continue to assist you 🙂

past torrent Nov 17, 2021, 10:29 AM

#

thank you so much

#

hello jonny

past torrent Nov 17, 2021, 10:30 AM

#

distant cove Define amount/currency on server

so these are static values

#

they dont change, just define them and thats it

sacred wing Nov 17, 2021, 10:34 AM

#

Hey @past torrent ! Just catching up

past torrent Nov 17, 2021, 10:35 AM

#

Hey how are you

#

So just a question

past torrent Nov 17, 2021, 10:35 AM

#

distant cove For example in Node js ``` const paymentIntent = await stripe.paymentIntents.cre...

Amount and currency are static values?

sacred wing Nov 17, 2021, 10:36 AM

#

They can be static or variables, however you're calculating them

past torrent Nov 17, 2021, 10:38 AM

#

Yes but like how should i change the values

#

If orakaro thats its not recommend it to send it back to the server in a POST request

#

Im working on an ecom app

sacred wing Nov 17, 2021, 10:44 AM

#

past torrent If orakaro thats its not recommend it to send it back to the server in a POST re...

Generally true yes as they're susceptible to your request being interfered with (i.e. changing the amount)

past torrent Nov 17, 2021, 10:45 AM

#

So if clients amount is suppose 5000$ how does the server know the amount

sacred wing Nov 17, 2021, 10:47 AM

#

Generally people have their prices defined by a database of products which have associated price values. The server can then look them up

past torrent Nov 17, 2021, 10:49 AM

#

can I add the backend developer to this thread please?

#

yes yes products prices are from the database but like the user is going to choose 50 product A which will lead his total of suppose 1000$

#

how does the server know this amount

#

thats what I mena

#

mean*

sacred wing Nov 17, 2021, 10:51 AM

#

That's up to your to configure that! I guess you could send the IDs of your products to the server and the server calculates the price

past torrent Nov 17, 2021, 10:51 AM

#

yes yes no problem but like thats what I mean

#

I shoud send him a POST request

#

but in the body, dont send the amount directly

#

we configure it our own way

#

correct?

sacred wing Nov 17, 2021, 10:52 AM

#

Yes, a POST to your backend which will:

Send the IDs of the products the user is buying
Your backend will lookup those products, and calculate the total
Create the PI with Stripe using that calculated total as the amount parameter

#

Does that make sense?

past torrent Nov 17, 2021, 10:53 AM

#

yes yes as I said above

#

thanks

sacred wing Nov 17, 2021, 10:55 AM

#

Cool!

#ralphsaridar-ReactNative

Table of conten...