Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Stripe’s new funding round values company at $35B

wsj.com

Post reply on HN
Print view View original

251–260 of 263 posts

Re: Stripe’s new funding round values company at $35B

#251

Post by huhtenberg »

lx wrote: post #246
huhtenberg wrote: post #157

Earlier quoted context omitted.

Please also make using Elements with Stripe.js v3 fully optional. We finished migrating to SCA-enabled payment flow not few days ago. Apparently, you can't create a PaymentMethod instance without using Elements and we don't have the time (nor do we see any practical need) to redo the frontend with them. So the end result is a Frankestein-style frontend that uses the v3, but with a fair share of v2 methods, because it…

Elements is not a requirement to create a PaymentMethod. The recommended path factors in PCI stuff etc. Feel free to email me to lx@stripe.com

Uhm... got a link?

According to [1] it is required and there's no other (documented) way to do it.

Ditto for stripe.createToken() [2].

In fact, there's no word in the docs on how to feed raw card data into the v3 at all.

So we had no choice but to use Stripe.card.createToken() from the v2, but then also use stripe.handleCardAction() from the v3 for confirmation... it's a mess. What did we miss?

[1] https://stripe.com/docs/stripe-js/reference#stripe-create-pa...

[2] https://stripe.com/docs/stripe-js/reference#stripe-create-to...

Re: Stripe’s new funding round values company at $35B

#252

Post by GeneralTspoon »

Chris_Newton wrote: post #250
ENGNR wrote: post #249

Earlier quoted context omitted.

But the whole question of "which payment method do you want to use?" is unnecessary complexity if they're sitting there with a card in their hand. Wouldn't it be better to let the front end service handle that question, and then use the appropriate Stripe APIs in the front end? The whole revelation of stripe was that if a customer was sitting there with a credit card, they just put it there into the same screen and i…

I'm never going to send retail customers out a payment gateway with someone else's brand/colors/html, mostly because it's just too confusing to introduce more concepts at that critical stage when they're about to actually make the payment This is one of the concerns we have with SCA. By the nature of the additional authentication steps, they are necessarily hosted off-site in some situations. Handing your customer of…

This is one of the concerns we have with SCA. By the nature of the additional authentication steps, they are necessarily hosted off-site in some situations.

Is this a necessity though? Couldn't they just enter the 2FA code in the same manner that they enter their card details on the merchant site? i.e. After entering their card details, it will just prompt them for more info if necessary.

Re: Stripe’s new funding round values company at $35B

#253

Post by openureye1s288 »

mehhh wrote: post #244
openureye1s288 wrote: post #235

Earlier quoted context omitted.

This is from 2014. I know several VoIP companies today that are using Stripe successfully.

Edwin (with Stripe) did just re-enable our account, I don't think we will use it, but its nice to not be banned!

You're welcome :)

Re: Stripe’s new funding round values company at $35B

#254

Post by [deleted] »

GeneralTspoon wrote: post #252
Chris_Newton wrote: post #250

Earlier quoted context omitted.

I'm never going to send retail customers out a payment gateway with someone else's brand/colors/html, mostly because it's just too confusing to introduce more concepts at that critical stage when they're about to actually make the payment This is one of the concerns we have with SCA. By the nature of the additional authentication steps, they are necessarily hosted off-site in some situations. Handing your customer of…

This is one of the concerns we have with SCA. By the nature of the additional authentication steps, they are necessarily hosted off-site in some situations. Is this a necessity though? Couldn't they just enter the 2FA code in the same manner that they enter their card details on the merchant site? i.e. After entering their card details, it will just prompt them for more info if necessary.

[deleted]

Re: Stripe’s new funding round values company at $35B

#255

Post by Chris_Newton »

GeneralTspoon wrote: post #252
Chris_Newton wrote: post #250

Earlier quoted context omitted.

I'm never going to send retail customers out a payment gateway with someone else's brand/colors/html, mostly because it's just too confusing to introduce more concepts at that critical stage when they're about to actually make the payment This is one of the concerns we have with SCA. By the nature of the additional authentication steps, they are necessarily hosted off-site in some situations. Handing your customer of…

This is one of the concerns we have with SCA. By the nature of the additional authentication steps, they are necessarily hosted off-site in some situations. Is this a necessity though? Couldn't they just enter the 2FA code in the same manner that they enter their card details on the merchant site? i.e. After entering their card details, it will just prompt them for more info if necessary.

I’m not sure exactly what PSD2 requires in this respect without checking it again, but in practice I think all of the major schemes for card payments that actually exist do work that way, so it’s probably beyond the ability of any service like Stripe to avoid at the moment.

Re: Stripe’s new funding round values company at $35B

#256

Post by lx »

huhtenberg wrote: post #251
lx wrote: post #246

Earlier quoted context omitted.

Elements is not a requirement to create a PaymentMethod. The recommended path factors in PCI stuff etc. Feel free to email me to lx@stripe.com

Uhm... got a link? According to [1] it is required and there's no other (documented) way to do it. Ditto for stripe.createToken() [2]. In fact, there's no word in the docs on how to feed raw card data into the v3 at all. So we had no choice but to use Stripe.card.createToken() from the v2, but then also use stripe.handleCardAction() from the v3 for confirmation... it's a mess. What did we miss? [1] https://stripe.com…

beware of PCI compliance requirements [0] but you can either create a payment method explicitly [1] or include the card details when handling a card payment [2] `{payment_method_data: {card: {…}}}`

[0] https://stripe.com/docs/security#validating-pci-compliance

[1] https://stripe.com/docs/api/payment_methods/create#create_pa...

[2] https://stripe.com/docs/stripe-js/reference#stripe-handle-ca...

Re: Stripe’s new funding round values company at $35B

#257

Post by huhtenberg »

lx wrote: post #256
huhtenberg wrote: post #251

Earlier quoted context omitted.

Uhm... got a link? According to [1] it is required and there's no other (documented) way to do it. Ditto for stripe.createToken() [2]. In fact, there's no word in the docs on how to feed raw card data into the v3 at all. So we had no choice but to use Stripe.card.createToken() from the v2, but then also use stripe.handleCardAction() from the v3 for confirmation... it's a mess. What did we miss? [1] https://stripe.com…

beware of PCI compliance requirements [0] but you can either create a payment method explicitly [1] or include the card details when handling a card payment [2] `{payment_method_data: {card: {…}}}` [0] https://stripe.com/docs/security#validating-pci-compliance [1] https://stripe.com/docs/api/payment_methods/create#create_pa... [2] https://stripe.com/docs/stripe-js/reference#stripe-handle-ca...

I am aware of [0], but unless I'm missing something neither of the methods allows creating a payment method on the client and then passing its ID to our backend to be executed and set up for 'future use'.

That's the flow we had with the v2 and that's what we can't replicate with the v3.

Re: Stripe’s new funding round values company at $35B

#258

Post by nickjj »

edwinwee wrote: post #182
nickjj wrote: post #177

Earlier quoted context omitted.

I'm glad I wasn't the only one who had issues with the "support circle". Usually Stripe is on the ball but I dunno, I had a very non-productive back and forth with them. Non-productive in the sense that it took a long time to get anything that was in response to my initial email and that in the end I didn't learn anything I didn't know before I sent the first email. Their first couple of replies just tried to get me…

Not good. Sorry about that. Could you forward me that support thread (edwin@stripe.com) and I can look into what went wrong?

I just want to follow up with after emailing edwin, I was put in contact with someone who is on a different level than the support team I've talked with originally.

We got in touch late Friday so a resolution wasn't made (not enough time), but it's clear he spent more than 1 minute skimming the support message and it felt like he really put in serious effort to help me in my specific situation. I think everything will be crystal clear in the end after a couple of emails (and these aren't just repeating emails, it's to deal with moving forward with new info after implementation).

I wish this type of support was the default. It never would have happened without this post on HN happening. There's a lot of value in having in depth emails about specific problems because it leads to documentation improvements that benefit everyone (plus it makes your paying customers happy on the spot because they got help using your product).

Re: Stripe’s new funding round values company at $35B

#259

Post by lx »

huhtenberg wrote: post #257
lx wrote: post #256

Earlier quoted context omitted.

beware of PCI compliance requirements [0] but you can either create a payment method explicitly [1] or include the card details when handling a card payment [2] `{payment_method_data: {card: {…}}}` [0] https://stripe.com/docs/security#validating-pci-compliance [1] https://stripe.com/docs/api/payment_methods/create#create_pa... [2] https://stripe.com/docs/stripe-js/reference#stripe-handle-ca...

I am aware of [0], but unless I'm missing something neither of the methods allows creating a payment method on the client and then passing its ID to our backend to be executed and set up for 'future use'. That's the flow we had with the v2 and that's what we can't replicate with the v3.

disclaimer: not recommended, etc... but ¯\_(ツ)_/¯ https://runkit.com/lxmedina/5d863141b387ad00138e273f

Re: Stripe’s new funding round values company at $35B

#260

Post by Chris_Newton »

nickjj wrote: post #258
edwinwee wrote: post #182

Earlier quoted context omitted.

Not good. Sorry about that. Could you forward me that support thread (edwin@stripe.com) and I can look into what went wrong?

I just want to follow up with after emailing edwin, I was put in contact with someone who is on a different level than the support team I've talked with originally. We got in touch late Friday so a resolution wasn't made (not enough time), but it's clear he spent more than 1 minute skimming the support message and it felt like he really put in serious effort to help me in my specific situation. I think everything wil…

Interesting comment. I hope it works out for you.

I wonder whether that might also be what the last person from Stripe support meant when they mentioned sending us to some sort of specialist. Unfortunately by that point we’d already spent more than two weeks going back and forth with numerous people replying but no actionable advice, so we declined and made other arrangements. However, I did also send them some notes similar to my comments here, so perhaps the negative experience in our case could at least be helpful for improving their documentation for others in the future.

Post reply on HN