gkleinig-3DS | Stripe Developers | Page 1

pearl furnace Jun 20, 2022, 9:12 AM

#

👋 happy to help

opal verge Jun 20, 2022, 9:12 AM

#

legend

pearl furnace Jun 20, 2022, 9:12 AM

#

I don't seem to follow the question, could you please explain what are you trying to achieve?

opal verge Jun 20, 2022, 9:12 AM

#

sure can!

#

i'm using the handleCardAction method to advance a payment intent with some card details

#

and we've been noticing a series of payment intents that have been 'created, then authenticated against 3d secure and an hour or so later they just expire... and i was wondering if there's a 3dsecure modal, or redirect that can occur, which would actually redirect our users off our site to their bank

#

and then upon returning to our payment form after completing the 3d secure steps, they're essentially just looking at a blank form again - since we have nothing in place to handle redirecting

pearl furnace Jun 20, 2022, 9:15 AM

#

that might be the case yes

opal verge Jun 20, 2022, 9:16 AM

#

i was just reading the docs for the new Payment Element JS and noticed there's a return_url parameter which i dont believe exists / existed when i built this haha

pearl furnace Jun 20, 2022, 9:16 AM

#

if you want to test it you could use the 3DS cards you could find here https://stripe.com/docs/testing#regulatory-cards

Testing

Simulate payments to test your integration.

opal verge Jun 20, 2022, 9:16 AM

#

yeah i have tried them but none of them seemed to redirect off-site

pearl furnace Jun 20, 2022, 9:16 AM

#

https://stripe.com/docs/testing#three-ds-cards

Testing

Simulate payments to test your integration.

#

the normal implementation would get you a modal within the same page

opal verge Jun 20, 2022, 9:17 AM

#

oh the webview one might do it

pearl furnace Jun 20, 2022, 9:17 AM

#

are you using it on mobile?

opal verge Jun 20, 2022, 9:17 AM

#

not a mobile app, but mobile browser

pearl furnace Jun 20, 2022, 9:18 AM

#

yeah it's tricky to test

#

the expiry might just be a case of a user not passing 3DS

opal verge Jun 20, 2022, 9:18 AM

#

all the payment intents show that they have indeed passed 3DS

pearl furnace Jun 20, 2022, 9:18 AM

#

do you have a Payment Intent Id I could take a look at?

opal verge Jun 20, 2022, 9:19 AM

#

sure! one moment

pearl furnace Jun 20, 2022, 9:19 AM

#

take your time

opal verge Jun 20, 2022, 9:20 AM

#

here's some examples for 2 different customers that have reported the issue (just FYI, these are being handled via a Connected Account)
Customer A
pi_3LCUyNJjNzQSQg5H0DX6eDc9
pi_3LCUzaJjNzQSQg5H0Hnvi6CA
pi_3LCV0aJjNzQSQg5H0ZnsoJ23

Customer B
pi_3LCS1aJjNzQSQg5H1QZ3xxIJ
pi_3LCS2uJjNzQSQg5H1EQg59Ey
pi_3LCP0CJjNzQSQg5H0P0grzKJ

pearl furnace Jun 20, 2022, 9:22 AM

#

pi_3LCUyNJjNzQSQg5H0DX6eDc9 this PI wasn't confirmed, let me check a bit the others and get back to you with my findings

opal verge Jun 20, 2022, 9:22 AM

#

not confirmed, that's right yep

#

they're passing 3DS but not being confirmed which makes me think that the handleCardAction is redirecting them off site

#

the pseudo code im using for processing is:

prevent form resubmission
generate a payment intent for the desired amount
inspect the payment intent response

if "error" [showError(response.error)]
else if "requires_action" [Stripe Elements.JS - handleCardAction(response.client_secret)]
else if "success" [//internal business logic stuff]
else [fallbackErrorHandling]

so my query is that if it's possible for the handleCardAction method to initiate a redirect off our website to another website (for eg, to get bank authentication), then when the user comes back to the form, they're essentially just coming back to a reloaded form, since we have no logic / handling for them returning from an external website. i was under the assumption that all 3DS challenges were performed on the same URL in a modal window

#

apologies for the information overload

pearl furnace Jun 20, 2022, 9:34 AM

#

no worries, but I'm a bit confused of some things I found while I was looking at your PIs

#

I see you are passing the payment method and confirm true in the backend

#

so are you generating a payment method on the front-end and sending its id to the backend?

opal verge Jun 20, 2022, 9:36 AM

#

yes, in order to attach it to the customer record

pearl furnace Jun 20, 2022, 9:37 AM

#

if I might be straightforward with you, this approach would give you more issues then you'd expect

opal verge Jun 20, 2022, 9:37 AM

#

absolutely, be straightforward haha

#

we're processing ~$1.8m AUD through our connected accounts with Stripe and this seems to be the first time its popped up

#

each month

pearl furnace Jun 20, 2022, 9:38 AM

#

the best way of attaching the payment method to the customer and follow our best practices is doing the following

opal verge Jun 20, 2022, 9:38 AM

#

ok

pearl furnace Jun 20, 2022, 9:38 AM

#

create a payment intent with setup_future_usage
https://stripe.com/docs/api/payment_intents/create#create_payment_intent-setup_future_usage

Stripe API reference – Create a PaymentIntent – curl

Complete reference documentation for the Stripe API. Includes code snippets and examples for our Python, Java, PHP, Node.js, Go, Ruby, and .NET libraries.

#

sending the client_secret to the front-end

#

using either CardElement or PaymentElement and let us handle the rest

#

without having to do anything else on the front-end for the redirection etc

opal verge Jun 20, 2022, 9:40 AM

#

yeah that is essentially what I'm doing

#

$intentParams = [
'customer' => $customer->id,
'amount' => round($amount),
'currency' => strtolower($currency['code']),
'description' => 'Booking',
'metadata'=> [
'MASCHOOLID' => $this->school_id
],
'setup_future_usage' => 'off_session',
'statement_descriptor' => 'Martialytics Booking'
];

#

however im also adding confirm=true and confirmation_method=manual

pearl furnace Jun 20, 2022, 9:40 AM

#

yes this is the issue

opal verge Jun 20, 2022, 9:40 AM

#

ah ok!

#

OH, coz the payment intent is trying to authenticate immediately?? as its created?

pearl furnace Jun 20, 2022, 9:41 AM

#

and you're also passing the payment method id right?

#

OH, coz the payment intent is trying to authenticate immediately?? as its created?
💯

opal verge Jun 20, 2022, 9:41 AM

#

haha, so if i just remove the confirm=true part

pearl furnace Jun 20, 2022, 9:42 AM

#

you shouldn't pass the payment method as well

opal verge Jun 20, 2022, 9:43 AM

#

yeah ok, i see where im going wrong there

pearl furnace Jun 20, 2022, 9:43 AM

#

for pi_3LCUyNJjNzQSQg5H0DX6eDc9
you passed

  confirmation_method: "manual",
  confirm: "true"```
instead just leave these out, and pass the client_secret of that intent to the front-end

opal verge Jun 20, 2022, 9:43 AM

#

if($payment_method_token) {
$payment_method = \Stripe\PaymentMethod::retrieve($payment_method_token);
$intentParams['payment_method'] = $payment_method->id;

            $payment_method->attach(['customer' => $customer->id]);
            \Stripe\Customer::update(
                $customer->id,
                ['invoice_settings' => ['default_payment_method' => $payment_method_token]]
            );
        } else {
            $payment_method = \Stripe\PaymentMethod::all(['limit' => 1, 'customer' => $customer->id, 'type' => 'card']);
            $intentParams['payment_method'] = $payment_method->data[0]->id;
        }

#

ok, can do

#

so the Stripe Elements system will make sure that customer and that payment method are attached due to the setup_future_usage flag being set

#

?

pearl furnace Jun 20, 2022, 9:44 AM

#

yes

opal verge Jun 20, 2022, 9:44 AM

#

ILU.

#

i'll try it out.

#

thanks so SO much for your time, seriously

pearl furnace Jun 20, 2022, 9:45 AM

#

I think you could remove the whole snippet you just sent me

#

from your code

opal verge Jun 20, 2022, 9:45 AM

#

yeah im going to 🙂

#

❤️

pearl furnace Jun 20, 2022, 9:45 AM

#

let me know if you need any more help

opal verge Jun 20, 2022, 9:46 AM

#

have a great night / day wherever

#gkleinig-3DS