#andrea-skuola-client-secret

1 messages · Page 1 of 1 (latest)

orchid vortex
#

Hey! Nope, that's how we recommend you integrate (i.e. using a client_secret in your front-end appliction with Stripe.js)

#

No harm can come from them being public unless used with your API keys

celest goblet
#

but in js file the publishable api key is visible, no problems with this?

orchid vortex
#

All they can do with your publishable key and a client_secret is:

  • Retrieve the redacted object from the API (i.e. sensitive fields are omitted)
  • Confirm the Setup/Payment Intent
celest goblet
#

sorry, another question: can I change the font of the generated form with appearence api?

orchid vortex
#

The Payment Element?