Support Strong Customer Authentication using stripe about gocommerce HOT 3 CLOSED

Vendor docs

• About PaymentIntens
• Migration guide

Together with a customer we decided to try to support the synchronous flow first. The asynchronous one may follow later.

New payments flow

• Client: Create a payment method and pass that to POST /orders/:order_id/payments
• Server: Create a PaymentIntent with the payment method from the client - report back if the payment needs more actions (including the client secret for the payment intent)
• Client: Completes additional action and calls POST /payments/:payment_id/confirm
• Server: Responds with the result of checking if the transaction is completed, updates payment status on order

from gocommerce.

API docs for updated/new endpoints

POST /orders/:order_id/payments

Payload:

{
  "provider": "stripe",
  "stripe_payment_method_id": "<the id>"
}

Response: Transaction object
(state if 3D secure is pending)

{
  "id": "...", // transaction id
  "order_id": "...",
  "invoice_number": "...",
  "processor_id": "...",
  "user_id": "...",
  "amount": "...",
  "currency": "...",
  "status": "pending",
  "type": "...",
  "created_at": "...",
  "provider_metadata": {
    "payment_intent_secret": "<client secret>"
  }
}

POST /payments/:payment_id/confirm

(payment id from previous response)

Payload: none

Response:

{
  "id": "...",
  "order_id": "...",
  "invoice_number": "...",
  "processor_id": "...",
  "user_id": "...",
  "amount": "...",
  "currency": "...",
  "status": "paid",
  "type": "...",
  "created_at": "..."
}

from gocommerce.

Updates to the SDK (gocommerce.js)

• GoCommerce.payment(payment_details)
• GoCommerce.paymentConfirm(payment_id) new method

Example

const { status, provider_metadata, id: paymentId } = GoCommerce.payment({ stripe_payment_method_id: "..." })
if (status === "pending") {
  const { payment_intent_secret } = provider_metadata
  // do 3D secure
  try {
    GoCommerce.paymentConfirm(paymentId)
  }
}

from gocommerce.