Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Recurly.js library released for secure, customizable checkout forms

js.recurly.com

Post reply on HN
Print view View original

31–40 of 41 posts

Re: Recurly.js library released for secure, customizable checkout forms

#31

Post by pbreit »

isaachall wrote: post #16
jcc80 wrote: post #14

Earlier quoted context omitted.

I think Braintree does it, kind of: "By using our Transparent Redirect (TR) and Vault, merchants can achieve PCI Compliance in days. TR and the Vault will eliminate the handling, processing or storing credit card data so you can qualify for the Self Assessment Questionnaire A, the shortest of the four SAQs." http://www.braintreepayments.com/services/pci-compliance edit: So, w/ Recurly I wonder if it's the same thing…

With Recurly.js and our Transparent Post, merchants only need to fill out the Self Assessment Questionnaire A. We launched our own Transparent Post back in March 2011. We created Recurly.js to simplify performing client-side validation, pricing calculations (w/ coupons, VAT, add-ons), and proper error handling when a transaction is declined. It's 10x easier to implement than Transparent Post, and has a much better us…

Ok, I see, so it's a bit different from Stripe's approach which to actually Ajax the cc# to stripe's server and return a token which the merchant then uses as a proxy for thee cc in normal API calls. I think they claim to obviate the self-exam for merchants despite it being materially similar to e transparent post.

Re: Recurly.js library released for secure, customizable checkout forms

#32

Post by reverb »

isaachall wrote: post #16
jcc80 wrote: post #14

Earlier quoted context omitted.

I think Braintree does it, kind of: "By using our Transparent Redirect (TR) and Vault, merchants can achieve PCI Compliance in days. TR and the Vault will eliminate the handling, processing or storing credit card data so you can qualify for the Self Assessment Questionnaire A, the shortest of the four SAQs." http://www.braintreepayments.com/services/pci-compliance edit: So, w/ Recurly I wonder if it's the same thing…

With Recurly.js and our Transparent Post, merchants only need to fill out the Self Assessment Questionnaire A. We launched our own Transparent Post back in March 2011. We created Recurly.js to simplify performing client-side validation, pricing calculations (w/ coupons, VAT, add-ons), and proper error handling when a transaction is declined. It's 10x easier to implement than Transparent Post, and has a much better us…

It is indeed. Recurly has really improved over time, you have been doing a great job. It is so much easier to set up subscription payments today (with a solution like Recurly) than it was 2-3 years ago. Keep up the good work!

Re: Recurly.js library released for secure, customizable checkout forms

#33

Post by fletchowns »

mtogo wrote: post #24
BSeward wrote: post #7

Is this accessible for audio browsers? Screen readers navigating by form elements will be pretty lost without s (and WAI-ARIA attributes for rich components, but one thing at a time). Would hate to be the site that tried to simplify their billing but got an accessibility lawsuit[1] for their troubles. [1]: http://en.wikipedia.org/wiki/National_Federation_of_the_Blin...

Wow, thanks for linking that lawsuit. I had no idea there was a risk of getting sued just for not setting your site up perfectly for primadonna blind persons. That's really terrifying.

> primadonna blind persons

What a hateful, insensitive thing to say. Obviously the National Federation of the Blind isn't going to go after just any website, they are going to go after the larger ones that should know better. Big companies should absolutely be forced to accommodate people with disabilities, I would even say that is part of what makes the United States such a great country.

Re: Recurly.js library released for secure, customizable checkout forms

#34

Post by simonw »

The http://js.recurly.com/ site doesn't link to or mention recurly.com (or that it's a payment provider service) anywhere. As a result, I was pretty confused when the intro video started mentioning the "Recurly API" - I was also wondering how an open source JavaScript form library could possibly handle payments.

Suggestion: add the text "a JavaScript library for the Recurly payments API" (or equivalent) somewhere on the page!

Re: Recurly.js library released for secure, customizable checkout forms

#35

Post by simonw »

trungonnews wrote: post #27
grimen wrote: post #26

Earlier quoted context omitted.

Yes in fact the iframe is the only way of doing it securely with the current web specs. ...and it can in fact be done almost completely seamless for the end user, with lil bit of hacking.

yup. it's a bitch getting the iframe to resize when the credit card form shrinks or grows.

It's not impossible though. One method of doing that is to use the trick where an iframe can communicate with its parent document by altering the #fragment URL, which can be read by both parties. It's dirty but it works. The new HTML5 postMessage API can be used as an alternative for browsers that support it.

Re: Recurly.js library released for secure, customizable checkout forms

#36

Post by [deleted] »

simonw wrote: post #35
trungonnews wrote: post #27

Earlier quoted context omitted.

yup. it's a bitch getting the iframe to resize when the credit card form shrinks or grows.

It's not impossible though. One method of doing that is to use the trick where an iframe can communicate with its parent document by altering the #fragment URL, which can be read by both parties. It's dirty but it works. The new HTML5 postMessage API can be used as an alternative for browsers that support it.

[deleted]

Re: Recurly.js library released for secure, customizable checkout forms

#37

Post by [deleted] »

fletchowns wrote: post #33
mtogo wrote: post #24

Earlier quoted context omitted.

Wow, thanks for linking that lawsuit. I had no idea there was a risk of getting sued just for not setting your site up perfectly for primadonna blind persons. That's really terrifying.

> primadonna blind persons What a hateful, insensitive thing to say. Obviously the National Federation of the Blind isn't going to go after just any website, they are going to go after the larger ones that should know better. Big companies should absolutely be forced to accommodate people with disabilities, I would even say that is part of what makes the United States such a great country.

[deleted]

Re: Recurly.js library released for secure, customizable checkout forms

#38

Post by krosaen »

emery wrote: post #3
Hovertruck wrote: post #2

This is nice, but I sort of wish it stated more bluntly that it requires jQuery. I also wish it didn't depend on jQuery, but that's just personal preference.

I'm the author. I'll be sure to put a notice at the top of the readme that it requires jQuery. Also, I agree with you. The jQuery dependency will be removed eventually. It was a time saver in the short term as we do a lot of DOM manipulation.

I'm a paying recurly customer, and I think depending on jQuery is totally fine; even if we had to include jQuery on a payment page when we didn't use it anywhere else on our site, that wouldn't be any trouble.

Please, use your precious development time on more pressing issues related to making payment's even easier to accept and integrate!

Re: Recurly.js library released for secure, customizable checkout forms

#40

Post by alanh »

simonw wrote: post #35
trungonnews wrote: post #27

Earlier quoted context omitted.

yup. it's a bitch getting the iframe to resize when the credit card form shrinks or grows.

It's not impossible though. One method of doing that is to use the trick where an iframe can communicate with its parent document by altering the #fragment URL, which can be read by both parties. It's dirty but it works. The new HTML5 postMessage API can be used as an alternative for browsers that support it.

I didn’t even realize postMessage was a new API. It works in everything newer than IE7. http://caniuse.com/#x-doc-messaging
Post reply on HN