#IGMontero-reuse-pm
oblique matrix
Hey! Can you tell me how you're collecting/saving payment details right now?
Is this possible by only using their payment method id and their customer id, or do I need to make extra validations on the front-end?
Generally, yes that should be enough: https://stripe.com/docs/payments/save-and-reuse?platform=web#charge-saved-payment-method
rocky girder
Hey!
Basically I'm using Stripe Elements on the front-end to collect their credit card, or the payment button to use Google Pay or Apple pay. Then creating a subscription based on that information
Then because I have the subscription, I also have the customer and default payment method saved.
I want to know if I can just reuse that information to bill the users, or if they need to revalidate their identity or information to allow the payment
Not sure if it makes sense that I could just bill them whatever I want, right?
oblique matrix
Got it, yep that's possible. See URL above
rocky girder
Okay so I guess there is an ethical/ux component to this process right?
Or we need to validate that the user actually wants to buy the thing somehow. Also what happens if the user leaves the app opened and a malicious user just buys stuff?
echo knoll
Can you also clarify what you're referring to by "in-app purchases"? Depending on what these purchases consist of they may need to go through the platform's in-app purchase flow rather than Stripe.
rocky girder
Well, it's a web app. For example, we want users to be able to buy content (imagine facebook posts) that are restricted
So a group of posts costs $5.00. They press purchase and the purchase is made.
echo knoll
Apologies, overlooked where you specified it was a web app.
rocky girder
Maybe I can just attempt to bill their payment method, and if it doesn't work, ask them to reenter their payment method
echo knoll
Yup, you can do that. Having a way to confirm your customer wants to make the purchase is a good idea as well.
With regards to someone staying logged in, walking away, and then another person using their account, unfortunately on our end we will have no way to tell the difference. So you may want to try to add some sort of confirmation flow if this is a scenario that you're concerned about.
rocky girder
Awesoem, thank you very much!!
echo knoll
Any time!