antona-cors | Stripe Developers | Page 1

severe salmon Feb 28, 2022, 2:04 PM

#

Hi 👋 that's a fairly broad question, are you encountering a particular CORS error that you're trying to prevent?

upper basin Feb 28, 2022, 2:05 PM

#

Hi Toby! Let me give you the scenario. User embeds a form to collect payment on their website.

#

So with payment intent we will now have to collect the customers CC and send it server side to create a payment intent via Ajax. So concerned about restrictions related to cors attempting this. So Wondering how we would handle this type of scenario as we are trying to migrate to the latest version of stripes API

severe salmon Feb 28, 2022, 2:12 PM

#

User embeds a form to collect payment on their website.
Can you clarify on this? Is this a form you create?

upper basin Feb 28, 2022, 2:14 PM

#

So it’s a saas application. Users can create payment forms in our application that they embed on their website (outside our Application). These users will have to have a stripe account to utilize this application.

#

So since payment intent new requirement, we want to ensure we are utilizing the best practice as suggested by stripe for this type of scenario to ensure everything remains secure but also not to trigger cross browser restrictions

severe salmon Feb 28, 2022, 2:23 PM

#

Gotcha, then you'll probably want to use our Payment Element. You typically don't want to handle card numbers directly as that puts the PCI compliance burden on you.
https://stripe.com/docs/payments/payment-element

Stripe Payment Element

Accept payment methods from around the globe with a single secure, embeddable UI component.

upper basin Feb 28, 2022, 2:33 PM

#

We are using payment elements but we still have to send a request server side using Ajax to get the payment intent object

#antona-cors