richnologies / ngx-stripe

Angular 6+ wrapper for StripeJS
MIT License
219 stars 77 forks source link

How do I know if cvc card is being sent to stripe? #79

Closed jkon closed 4 years ago

jkon commented 4 years ago

This is really more of a question than a bug, depending on the answer I guess. How do I determine whether or not the cvc code that is in the stripe component is actually sent to stripe? I am passing the component to createToken form like this:

@ViewChild( 'stripeCard', { static: false } ) stripeCard: StripeCardComponent;
...

this._stripeService.createToken( this.stripeCard.getCard(), this.cardForm.getRawValue() )

But I got an email from stripe yesterday that said none of my card payments are using the cvc code. The stripe component seems to have a spot for it in the form, but according to stripe, it isn't being sent with the rest of the card info. When inspecting the stripeCard component in the debugger, I'm not seeing anything that helps me confirm the cvc code is present in the object getCard() returns Thanks

nickdnk commented 4 years ago

Inspect the traffic in your browser and see if the CVC code is sent to Stripe’s servers when you tokenise the card.

On 14 Nov 2019, at 19.38, Joshua Kon notifications@github.com<mailto:notifications@github.com> wrote:

This is really more of a question than a bug, depending on the answer I guess. How do I determine whether or not the cvc code that is in the stripe component is actually sent to stripe? I am passing the component to createToken form like this:

@ViewChild( 'stripeCard', { static: false } ) stripeCard: StripeCardComponent; ...

this._stripeService.createToken( this.stripeCard.getCard(), this.cardForm.getRawValue() )

But I got an email from stripe yesterday that said none of my card payments are using the cvc code. The stripe component seems to have a spot for it in the form, but according to stripe, it isn't being sent with the rest of the card info. When inspecting the stripeCard component in the debugger, I'm not seeing anything that helps me confirm the cvc code is present in the object getCard() returns Thanks

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHubhttps://github.com/richnologies/ngx-stripe/issues/79?email_source=notifications&email_token=ACAFRMR4SYUNOM6KGJORIFTQTWLKLA5CNFSM4JNP36C2YY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4HZM4A5Q, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ACAFRMUTXM46PAH2RHENNXDQTWLKLANCNFSM4JNP36CQ.

jkon commented 4 years ago

@nickdnk great idea, thanks! It does seem to be in the form data sent to stripe. Now this is no longer an issue with ngx-stripe, so I'll close. But now I ahve no idea why stripe is telling me I'm not using the cvc