4WiFi-firewall | Stripe Developers | Page 1

cold hollow Dec 21, 2021, 2:19 AM

#

Everything here: https://stripe.com/docs/ips

Domains and IP Addresses

Ensure your integration is always communicating with Stripe.

humble storm Dec 21, 2021, 2:28 AM

#

Unfortunately that is not a complete list. It is certainly missing pay.google.com
but it likely is missing whatever the hostnames that apple pay uses too

#

is there somewhere that lists the other domains the checkout page also includes?

#

specifically only the domains/hosts used for checkout.stripe.com, I dont need all the other API ones as those are server-side, I only need the domains to whitelist in the walled garden of the client side

cold hollow Dec 21, 2021, 2:56 AM

#

Hello, yes sorry that page only included Stripe own domain. I understand you want to explicitly restrict domains (which is somehow uncommon pattern AFAIK), then you would want to find out what other domain from Apple/Google you need to whitelist. I am sorry we don't have a Doc covering those

humble storm Dec 21, 2021, 2:59 AM

#

When using a hotspot scenario, creating a whitelist of allowed domains is very common indeed and specifying these for your chosen payment gateway to operate successfully is very normal.
This is called a Walled Garden Whitelist.

#

I will go see what I can find, unfortunately Apple has a lot of annoying articles referencing "walled garden" which are completely unrelated and have so far proven hard to fix. Might have to turn off Apply/Google Pay options for now

#

thanks for the help of course 😄 not going insane looking on my own this way

cold hollow Dec 21, 2021, 3:02 AM

#

Just a quick peek, should this be Apple Pay list? https://developer.apple.com/documentation/apple_pay_on_the_web/setting_up_your_server

humble storm Dec 21, 2021, 3:04 AM

#

I found that, it is for integrating to their API (for which you are doing, not me). I found the same thing. It does not specify the domains I am expecting to see at all, this appears to be server-side like the list you sent me before to stripe itself

#

applepay.cdn-apple.com
pay.google.com
These 2 seems to be at least part of what is needed (if anyone asks)

cold hollow Dec 21, 2021, 4:03 AM

#

I am curious where did you see those values?

#

I only see stripe domain when I click to the Checkout's Apple Pay button

humble storm Dec 21, 2021, 4:27 AM

#

what do you get when the page is loaded? not when you click on the link?
I dont have a mac so can not check, but on a chrome browser it loads some data from pay.google.com

cold hollow Dec 21, 2021, 4:30 AM

#

all Stripe so far

humble storm Dec 21, 2021, 4:31 AM

#

probably the sources tab would be more helpful

#

but that looks like it might be OK for apple so far 😄

cold hollow Dec 21, 2021, 4:34 AM

#

Google Pay does includes pay.google.com as you said

#

But yeah you can test it yourself

#4WiFi-firewall