jfmlima-3DS | Stripe Developers | Page 1

gritty terrace Apr 21, 2022, 12:31 PM

#

Hi! Give me a few minutes to look into this.

wide whale Apr 21, 2022, 12:34 PM

#

hey @gritty terrace, sure thing, thanks!

gritty terrace Apr 21, 2022, 12:37 PM

#

So yes with the test card 4000000000003063 this error is expected since you are passing off_session:"True".

#

So you need to remove off_session:"True" to get the requires_action status.

wide whale Apr 21, 2022, 12:38 PM

#

uhm, is it the same with the card ending in 3220? req_iNyRs9W4420wZH

#

I thought that sending the off_session: True would be required to trigger the 3DS :/

gritty terrace Apr 21, 2022, 12:39 PM

#

Yes, it doesn't make sense to go though the 3DS flow if the customer if off session. That's why it doesn't work. You need to remove off_session:"True" to get the requires_action status.

wide whale Apr 21, 2022, 12:39 PM

#

ahhhhh

gritty terrace Apr 21, 2022, 12:40 PM

#

off_session: true means the customer is not on your website/app, so there's no way for them to complete the 3DS flow, so we return an error.

wide whale Apr 21, 2022, 12:40 PM

#

would that affect off_sessions charges that don't require 3DS?

#

right, my idea here was to have them come back to the site via email

#

even if they are off_session, does that make sense?

gritty terrace Apr 21, 2022, 12:43 PM

#

Got it! This case is covered in the documentation here, with a try/catch: https://stripe.com/docs/payments/save-and-reuse?platform=web#charge-saved-payment-method

wide whale Apr 21, 2022, 12:44 PM

#

but that's exactly what I'm doing 🤔 and in the error the requires_action is never filled 😕

gritty terrace Apr 21, 2022, 12:47 PM

#

Got it! I guess when the first payment intent fail, you can retrieve its ID, and then call confirm while passing the payment_method https://stripe.com/docs/api/payment_intents/confirm, and it will have a requires_action status.

wide whale Apr 21, 2022, 12:48 PM

#

uhm, even if I'm sending the confirm=True while creating the payment in the first place? 🧐

gritty terrace Apr 21, 2022, 12:50 PM

#

I just tested this, and it worked for me:

Create the PaymentIntent with confirm:true. If it works: great! If it fail then...
Call https://stripe.com/docs/api/payment_intents/confirm to confirm the PaymentIntent while passing the payment_method, and it will have a requires_action status.

wide whale Apr 21, 2022, 12:53 PM

#

gotcha, I'll give that a try, thank you so much!!

wide whale Apr 21, 2022, 1:13 PM

#

another qq, when the user adds the card (we don't charge right away) he does the 3DS verification, however in the remaining flow of adding the card we might charge, is it always required the he does the 3DS again?

#

also, does the redirect_url to authenticate 3DS have an expiration date?

#

and thanks, the confirm step worked 🙌 🙏

rain hatch Apr 21, 2022, 1:23 PM

#

Hello, soma had to step out but I am catching up. Can you tell me more about the charge that you might make in that scenario?

#

It is ultimately up to the bank when to ask for 3DS auth. You won't always have to do 3DS auth again but you should be ready for it to be required on any charge that you try to make

wide whale Apr 21, 2022, 1:24 PM

#

so, here's our flow real quick:

users adds a card through checkout
we save the card in our db
if the user has balance, we trigger a charge if not skip

3DS from my testing, while adding a card and when we try to charge :/

#

and hi @rain hatch 👋

#

considering that we will bring the customer back in session, how long does the redirect_url to authenticate lasts?

rain hatch Apr 21, 2022, 1:32 PM

#

So that charge may require 3Ds auth. If you set off_session: true we will communicate to the bank that the user is off session and the bank will be less likely to ask for auth https://stripe.com/docs/api/payment_intents/create#create_payment_intent-off_session

Stripe API reference – Create a PaymentIntent – curl

Complete reference documentation for the Stripe API. Includes code snippets and examples for our Python, Java, PHP, Node.js, Go, Ruby, and .NET libraries.

wide whale Apr 21, 2022, 1:33 PM

#

yep, we're doing that already

rain hatch Apr 21, 2022, 1:34 PM

#

I don't know of an expiration on that link. We don't expire it, I'm guessing some banks might have some policy on how long a user can auth for. Any which way, you should be good to get the user back on session and direct them to the link

wide whale Apr 21, 2022, 1:34 PM

#

can we do that through an email?

#

I've seen in the documentation we should do that through a iframe

#

but since we'll bring him back in session via email, can he just go the redirect_url straight from the email?

rain hatch Apr 21, 2022, 1:52 PM

#

Good question. I think you can just send them to the URL but will check our docs

#

Can you send me the doc with the iframe info?

wide whale Apr 21, 2022, 1:57 PM

#

https://stripe.com/docs/payments/3d-secure#when-to-use-3d-secure

Card authentication and 3D Secure

Learn about authentication to reduce fraud and meet regulatory requirements.

rain hatch Apr 21, 2022, 2:06 PM

#

So yes, you can definitely just send them to the URL and they will be directed to your return URL at the end of the process

wide whale Apr 21, 2022, 2:10 PM

#

all right, thank you so much 🙏

#jfmlima-3DS