#akii-clientsecret
buoyant smelt
Hi, do you mean PaymentIntent's ClientSecret?
where are you sending it to?
Normally it's safe to be exposed to client-side so it shouldn't be a problem to include in URL. But I wonder what scenario is that
abstract imp
Yes its the Payment Intent's Client Secret.
stripe.confirmPayment({
//Elements instance that was used to create the Payment Element
elements,
confirmParams: {
return_url: "http://localhost:3006/user/settings/billing/plans/clientSecret"
}
});
It is hitting this URL
Stripe is hitting this URL along with ClientSecret
buoyant smelt
why would you need clientSecret there? You can simply send in the PaymentIntent Id
return_url is the redirection after PI has successfully confirmed, so no need for client secret anymore
abstract imp
Im not sending it, Stripe is redirecting me after successful payment to this URL along with payment intent id and ClientSecret attached.
buoyant smelt
If you don't need it then feel free to remove it
you can use a simple URL like "http://localhost:3006/user/settings"
abstract imp
No i actually need it to get the Payment method id.