#stripe

Alright I'll try that out

Hello Stipe, I am trying to update a APO adress in stripe and it is failing to validate the zip code. The customer states the adress on her end won't save as well.

Sorry the customer had an old adress and is trying to update it to a APO adress

Hello stripe, dev question

I want to use stripe.js in our webapp frontend

is that possible?

basically I created a few plans in stripe, I want to display them on the pages. Can I pull them through stripe.js?

?

Guest45138: you can pull the plan names through the API, not stripe.js

e.g https://stripe.com/docs/api#list_plans

AHA!

Thanks

Just curious, any reason that stripe.js is not available in frontend?

hm, i'm not sure what you mean. Stripe.js is what you'd use on the front end of your app to send us card details

Did anyone see my question?

I am looking at

irctc534: the zip code on the card would have to match what the bank has on record

The library there is for node/ruby/python/php, but not frontend support

Guest45138: you'd use the API to retrieve things like plan names and display them on the front end with whatever language you're using in your app

ok. So let me ask another question, what is the advantage of using stripe.js vs restful API?

Guest45138: Stripe.js is only to help you be PCI compliant so that your API doesn't have access to card details

other than that, they are the same functionally?

Guest45138: Stripe.js only lets you convert card details into card tokens, it does nothing else

Guest45138: so the libraries are just ways to access the REST Api

Stripe.js and Stripe Checkout are tokenization methods to reduce your PCI compliance burden

I see. They are both to be embedded in webpage correct?

I guess stripe.js allows custom forms

Stripe Checkout and Stripe.js are used on the front end of your webpage. The libraries are used server side

Stripe.js is for the custom forms use case

I see

thanks

I guess frontend API is restful only, no equivalently of node.js libraries?

what do you mean?

*equivalent

There is a Node.js library for Stripe but it should be used by your backend not your front end

if your front end could use it, that means your users could do horrible things to it

can you give me an example?

another question. should I force my user to verify his email and which advantages would I get with the verification process?

Guest45138: I'm confused at what you're confused about

what damage can it do if I install node.js library on frontend?

Guest45138: I can refund my charge, I can refund every charge you ever made

I can transfer all your money to my bank account

I can create tons of fraudulent charges and get your Stripe account disabled

these functions are not available through restful API ?

All those functions are availble through the rest api https://stripe.com/docs/api

exs: that's a choice you'll have to make depending on your app independent of Stripe

The Node.js library is just a wrapper of the restful library

I am trying to find out the functional difference between API and library. I guess libraries can do a lot more than API

can I transfer money by calling rest api from frontend?

ajs_, I know in general I wonder why I should verify the customers email addresses in general. Why should I care about their address. In my process they can only sign up with a valid credit card. In the stripe checkout.js they are asked for a email address. So its nice to have an kind of overview in your stripe backend, but I dont really care about their addresses. I want their money :D

Guest45138: the Library does everything the API does

so there are maybe rational arguments why I should verify their addresses?

exs: their email address is so you can email them and send them their receipt or process a refund, etc

Just to confirm: Is an invoice comprised with a series of invoice items? Can I create an invoice item for each item in the shopping cart (which consists of subscriptions and one time charges), and process that as a single invoice?

Guest45138: there is nothing the library can do that the API can't do

markin, the only argument I see is for the refunding processes. Because if I have no address I cant be sure that its the same user requesting for refunding.

but library does more than api ?

hello, my account was just suspended because support thinks that one of the charges (that didn't even go through) "wasn't consented" to. How do I prove consent and get my account back online?

so I can transfer money with rest api?

hello

exs: well many states require you provide the person with a receipt.

anyone here?

Guest45138: you can. The library can only do what the API allows, nothing more

nickname101: you'll have to email support@stripe.com. this chat is just for developer support

markin, yea but the stripe receipt email notification would be enough for it?

markin, and why should it be my problem if they dont give a valid address. I just send the email away

exs: I'm just saying you probably want the email, whether or not you want to verify it is up to you

So how do I make sure that does not happen?

Guest45138: you don't use your secret API key anywhere your user has access to it (like in your html)

markin, yea ok I just talk about the verification. I will ask for the email address, but I just wonder why should I implement a time consuming verification process? What could be the advantage for it that is worth

when I call rest api I only need to supply my public key right?

exs: mainly you want to do that if you have a username / password system

Guest45138: The rest API requires your private key, since only your server should be calling the rest api

back to square one....I need to read all the plan data from stripe to frontend. Is there a SECURE way I can do this from frontend?

does anyone know what mistake could result application_fee not charging?

Guest45138: no, you have to do it from your backend and pass it to your front end

daviduw: if you go to Stripe's dashboard you can go to the logs section and ensure that Stripe is actually getting the application fee

oh ok thx

so it wont show up in payment

or dashboard?

@markin

dave_g: Dashboard -> Logs

ok. But that seems like an inefficient way of doing things

Guest45138: its a security thing, with payments you likely want to control what your users get access to

for read calls, why does stripe require a secret key?

Guest45138: yes, if Stripe did not then anyone could just read all your charges

I didnt see any application charged on my platform dashboard

application fee*

I would imagine most of the time those data are to be displayed on public accessible pages? It would be easier if there is a way for users like us to specify if an API call requires secret key...just a thought

but ive already added "application_fee" in my charging object

nvm i found it

thx a lot

Guest45138: but I shouldn't be able to see the charges you made for another customer, I should only be able to see my charges

exactly, I will specify which API can be public so that calls like charges still require secret key but calls like listing plans require nothing

'Everything is secret until I specify otherwise'

hola - I'm a bit confused about the relationship between transfers, balances and balance transactions. If I have managed account A who receives an automated weekly transfer (id = tr_123) for $X, how do I query the API to find the complete list of original charges that are included in tr_123? e.g., if the transfer is $100, I want a list of the $50 $25, $10,$10 and $5 transactions that comprise it.

Guest45138: or you can just make your own api for that, it'd be pretty trivial to make your own api to front end that

hey markin i tried the ::client = ... and didnt work

massd: the charge will list the payment id. Then the balance history api will let you know what payments were in each transfer https://stripe.com/docs/api#balance_history

irctc500: so you did ::client = ... in the initializer and then in your controller using client gave an error?