#jesterp-ip-addresses
1 messages · Page 1 of 1 (latest)
Hello! We publish a list of IP addresses that api.stripe.com might resolve to: https://stripe.com/docs/ips#ip-addresses
<Gasp>... That's awesome! This has been a problem with other processors for me in the past... Hence the question. Thank you for that, I'm sorry I somehow missed this in the docs, and thank you.
Quick followup: am I right that if I admit that list of IPs i can use any of the widgets on your https://stripe.com/docs/payments docs? This is very good news for me if so, thank you again.
Yep, the PCI-compliant Stripe.js components just wrap calls to those same APIs
I cannot find an emoji that sufficiently expresses my excitement. So, accept the text instead, thank you so much, you've made my day!
🥳
You will likely need to also add some domains to an allow-list: https://stripe.com/docs/ips#stripe-domains
The problem with domains is that you need a way to read them from the client, and since the point of TLS is to prevent you seeing that, that doesn't work. As a rule anyway, i'm wrong. We don't filter anything on the DNS request side to the clients so that should be okay. I'll put together a mockup today and check it out, I'll post back here if I hit a wall. Have a good one!
The main blocker you'd have is loading Stripe.js from the CDN (as you cannot host it locally)