search

houdiniproject / houdini

Free and open source fundraising infrastructure for nonprofits and NGOs
https://houdiniproject.org
Other
184 stars 94 forks source link

Off site authorisation (SCA) #220

Open tttp opened 4 years ago

tttp commented 4 years ago

For the recurring donations (after the initial one), stripe/the customer bank can request an additional confirmation from the donor.

This means that if the donation is "pending" and require the donor to confirm, we need to 1) send an email to the donor "for extra security, you need to confirm the donation, click here" 2) provide a landing page "do whatever your bank require to authenticate yourself" (eg authenticate on their site, use their app...)

These are the existing solutions from stripe: 1) email:

subject: Confirm your €10.00 donation

Confirm your €10.00 donation 

Please confirm your payment to We Move Europe using [Visa Secure]. Your bank requires this security measure for your card ending in 1234. |

big button: "Confirm‑payment"

Why do you need to confirm this payment?

  Your bank sometimes requires an additional step to make sure an online transaction was authorized. Your bank uses Visa Secure to set a higher security standard and protect you from fraud.

if you have any questions, contact us at contact@example.org

You're receiving this email because you made a donation on wemove.eu [on date]

 

 Questions: can we know what type of card it is? Eg Visa vs mastercard?

 

wwahammy commented 4 years ago

@tttp: I believe there's a way to get the card type from the Stripe API.