Ranter
Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
Comments
-
stripe's SDK is straightforward, at least if you're doing it from the Server Side
-
retoor15937d@azuredivay maybe he's using rust and straightforward is just not a thing.
And I totally understand. Payment gateways is smth I totally hate to implement too for some reason. I also always production test them every deploy and often even have a special test product for that for cheapii. They always feel so fragile somehow. I trust the payment gateway less than any other api.
Implemented a client side gateway once of (name?) and they hired a hacker without us knowing and it got hacked indeed. He was able to buy our product for a dollar. We were pissed because the gateway was implemented that way due time pressure of said people and the risks were mentioned before. Also we were mad that we couldn't prepare before it because they didn't tell us. They said it was realistic. Fuckers, the only realistic thing was that we would indeed deploy a hack able server if they push us. Would still do. Not my money. I just hate having written a service known to be hacked while warned. -
@retoor im curious now how it got hacked via client side .-. did the hacker overwrite client-side params?
did the PaymentGateway give you a token representing the transaction? if so, it's their headache and not your fault -
retoor15937d@azuredivay there's a hash generated as a kind of security on the client side. It was ogone btw. It offered client side and server side. Hacker regenerated the hash over the shopping cart with his new price. That's it. I would've not even tried it. But ofc it really worked.
-
Tounai14027d@azuredivay
It would be okay if it was only payments but I am using stripe connect, and for everything I do, I have the impression that I have to understand finance regulations stuff which is probably the most obscure thing to me. Tbh it’s working fine so far but it’s stressful because my app is just a third party in the payment. -
Tounai14027d@retoor the rust project is the thing I am guilty of doing. Hope it makes your day brighter.
-
retoor15937d@Tounai You probably have a problem with one mutable reference any number of immutable references while references must always be valid. That causes issues with nested lifetimes, structs with multiple references or multiple mutable and immutable accesses. Lifetime tracking can lead to not working pp. You know that's true. With python your pp would be fine now.
-
Tounai14026d@retoor nah it has no problems as it is relatively simple. It should just not be my primary focus. + I know nothing about Python
3 weeks my projects don’t move, one because I am lazy because I hate integrating Stripe, the other because I feel guilty not working on the first one every time I open it.
rant