I want to process Stripe payment to create stripe subscription. For that I need to pass card number, expiration date, cvc to my backend api. Is it secure to create Stripe payment this way? If it is not secure, what methods can I use to secure the subscription request to the backend api?
1 Answers
1
votes
This is not recommended. Instead, you should collect payment details securely with Stripe Elements (docs)and use the safe IDs returned by that to collect payments.
If you are PCI compliant, you should contact Stripe support for assistance with enabling your account to process card details directly.