Stripe v3 module for SCA

[zeeshop 5]

@raiwaHi, hope you are well.

 

I noticed this issue recently and during the follow up tests that when existing customer or new (PWA) chose Stripe SCA as payment method, even going to site.com/checkout_confirmation.php create new order. 

During the test, I did not even fill card information, but only visiting this page created new order, however I do not receive order confirmation email, which shop owner and customer usually receive after successful completion of order.

I can only found out this through Admin site order page, but then I had to check Stripe website to confirm if customer successfully made payment or not.

Can you shed some light on this issue please, and how to resolve it.

 

Thanks

 

[♥raiwa 1,472]

It is how the module works. It creates already the order at checkout_confirmation.php

See the very first messager in this thread:

Quote

As the process flow has changed to use a web hook, the order has to be created in a pending state, and then updated to completed status after the payment has been authorised. Consequently, you need to set the new order status to 'Preparing [Stripe SCA]', and the order status is set to the status the order is to be set to, after the payment is authorised.

Technical Notes

..............................

The Stripe v3 process flow now requires a PaymentIntent to be created before the payment page is displayed, and a 'data secret' it generates to be included in the HTML form. If a saved card is used, the Stripe customer id and payment method id has to be added to the PaymentIntent. During coding, it was found that a payment method could not be removed from a PaymentIntent, so rather than update the PaymentIntent with a server call as the saved card/new card is selected, the adding of the customer and payment method is deferred until immediately before submitting the payment to Stripe in a Javascript call when the form is submitted. The payment_intent.php server hook is also used to save the value of the 'save card' check box in the PaymentIntent so it is accessible to the webhook called after the payment is authorised.

 

[zeeshop 5]

3 hours ago, raiwa said:

It creates already the order at checkout_confirmation.php

Thanks,

Does that means that if status " Preparing [Stripe SCA]" shown in order and payment is not completed , then perhaps after some time we better delete this incomplete order, otherwise it will keep filling up incomplete order?

Also I have Google reCAPTCHA v3 installed which works well in new account page, but not working on PWA module. is it any way I can make it work in PWA module to stop possibility of spamming guest customers and unnecessary Stripe SCA incomplete orders.

Thanks

Edited March 1, 2021 by zeeshop

[♥raiwa 1,472]

Quote

Does that means that if status " Preparing [Stripe SCA]" shown in order and payment is not completed , then perhaps after some time we better delete this incomplete order, otherwise it will keep filling up incomplete order?

Yes

Quote

Also I have Google reCAPTCHA v3 installed which works well in new account page, but not working on PWA module. is it any way I can make it work in PWA module to stop possibility of spamming guest customers and unnecessary Stripe SCA incomplete orders.

I do not know this module, but I believe you just need to add the create_account_pwa.php page to the page list where to add it.

You should ask the developer of that module.

[matarali 0]

On 9/5/2019 at 3:26 AM, asro2004 said:

Also, I'm embarassed to say that the authorize/capture isn't implemented either. All Stripe transactions are submitted as capture transactions regardless of the module configuration. I'll have to double check, but I think that applied to the old Stripe module as well. I can see there is an option when creating a payment intent to set it as an authorise transaction with an amount to capture. I'll include that in my to do list.

Did you ever get a chance to look into this?

[puggybelle 30]

I use  osCommerce 2.3.4.1 CE with PHP 7.0

I"m trying to install this payment module to give my buyers an alternative payment method other than just PayPal.

stripe_sca_v1.0.18

Stuck on this piece of text in the install instructions:

Quote

Note the DIR_FS_CATALOG constant should be set to a path string, rather than the value  dirname($_SERVER['SCRIPT_FILENAME']) . '/' because the includes/modules/payment/stripe_sca.php has a require that references the stripe-php library, and is executed at different locations in the directory structure and fails when the DIR_FS_CATALOG value varies with location.

It's been a while since I've played with code, so, I'm a bit lost now.  

If my website is called www.mywebsite.com - what do I change the DIR_FS_CATALOG constant to?  There are many instances of that constant in the file - do I change them all?  Or just one particular piece of code?

Additionally, I see in Admin...the module after it's installed...the following:

Is it necessary to fill this out and if so, I have no idea what to put there.

Thanks for any help!  - Andrea

[♥Smoky Barnable 72]

A recent customer contacted me to make sure her payment went through. She was confused because in her account area the saved card page showed an old expiration date. Doesn't this expiration date get updated automatically when customers get a new card with the same account number? Perhaps she must delete this card and checkout with new card? Regardless, her payment was successful using her saved card which had the wrong expiration date.

[♥14steve14 656]

16 hours ago, Smoky Barnable said:

A recent customer contacted me to make sure her payment went through. She was confused because in her account area the saved card page showed an old expiration date. Doesn't this expiration date get updated automatically when customers get a new card with the same account number? Perhaps she must delete this card and checkout with new card? Regardless, her payment was successful using her saved card which had the wrong expiration date.

I had that happen to me and had to add a new card and delete the old one. If you speak to Stripe they will tell you its a security thing so cards cannot just be updated by anyone, which is good.

[♥14steve14 656]

On 9/29/2021 at 3:09 AM, puggybelle said:

I use  osCommerce 2.3.4.1 CE with PHP 7.0

I"m trying to install this payment module to give my buyers an alternative payment method other than just PayPal.

stripe_sca_v1.0.18

Stuck on this piece of text in the install instructions:

It's been a while since I've played with code, so, I'm a bit lost now.  

If my website is called www.mywebsite.com - what do I change the DIR_FS_CATALOG constant to?  There are many instances of that constant in the file - do I change them all?  Or just one particular piece of code?

Additionally, I see in Admin...the module after it's installed...the following:

Is it necessary to fill this out and if so, I have no idea what to put there.

Thanks for any help!  - Andrea

I would imaging just the one in the includes/configure file. 

I use stripe and my is like this

  const DIR_FS_CATALOG = '/home/######/public_html/';

My proxy server settings are also empty because I dont use one so no need for anything , although if you do use a proxy then you will need to put something in there.

[♥Smoky Barnable 72]

I can capture customers ip address during the checkout process when customer pays with PayPal,  but this fails when customer uses stripe. Is there a way to capture the ip during order creation? Trying to capture in web hook or checkout success has failed thus far. If not, I could just capture upon account creation.

[yufonb 2]

Is it possible to migrate this addon from card-element to payment-element? To my understanding this will increase more payment options other than just credit cards, e.g. apple pay/google pay.

I have been reading this: https://stripe.com/docs/payments/payment-element/migration

and tried to make some tweaks to this addon but I can't it to work.

[mhsuffolk 61]

On 3/22/2022 at 7:34 AM, yufonb said:

Is it possible to migrate this addon from card-element to payment-element? To my understanding this will increase more payment options other than just credit cards, e.g. apple pay/google pay.

I have been reading this: https://stripe.com/docs/payments/payment-element/migration

and tried to make some tweaks to this addon but I can't it to work.

I have messaged you

[MountainMan 1]

I prefer NOT to get credit card info on my website.  For years have been using 2CheckOut.com (they have gotten really lousy, so need to dump)  and PayPal.   Both of these payment options collect credit card info on their respective websites, and then return to mine.

Is there a way to use the Stripe add-on like this.  Or perhaps (easily) mod the code so that it does?

[mhsuffolk 61]

Stripe inserts a place holder into your payments page. Despite appearing on your website the input fields are hosted by Stripe so card data is never on your server and your customer never leaves your site.

Full PCI compliance is provided automatically by Stripe providing you have a SSL so there are no lengthy forms to fill in..

I find their service reliable and far cheaper than PayPal.