Password Flow and Web Credit Card Add

[gregory hutchinson]

I'm on password flow and still on web add credit card -- want to talk steps to get access for this cc flow

or steps to figure out best way to handle the issue of mixed password flow and web add payment (as I'm not sure there is a way to pass auth from password flow to web session for adding a payment from iOS app for your use case here)

the issue is you only allow one login session per user and login in via web to add payment invalidates the user in my iOS app... any thoughts on this?

or is the only fix to discuss the steps for payment flow with you and move in that direction?

thanks!

{
  "status": 403,
  "error": "forbidden",
  "error_message": "Only access token with scope payment can use this endpoint"
}




[gregory hutchinson]

Bump

[Sixuan Liu]

Hey,

I'm a little bit confused about your question.

But if you're on oauth flow, you would use our oauth form to log user in, you would also need to use our oauth form to have the user to put in their payment information. If you're on password flow and you create your own page to have user log in using your client_id/secret, then you will get access_token after the user is successfully logged in, and you would need to create your own payment form to have the user input their payment info and that "add credit card" request needs to use the access_token you get back from the login request. If you were using the access_token to add the card and you were receiving above error messages, please share with me your client_id used and the access_token used so I can investigate if your client_id is setup with the correct scopes.

Please let me know if I understand your question correctly or not. 

Best,

Sixuan

[gregory hutchinson]

You understand correctly -- was on the oauth flow and migrated to password flow.

however, it seems i don't have the scope permissions needed for payment on the password flow.

client id: NDYwMGZhMzhiNjQ3NGE0MzI1ZmI2Y2Y1ZDBkNzczMzBh

[Sixuan Liu]

Please try log in to get a new access_toekn and then try the same add credit card call again? Let me know what you see.

[gregory hutchinson]

same result.

[Sixuan Liu]

Can you send me your access_token?

[Sixuan Liu]

Actually, can you send the user's email address and I will confirm the access_token with you? 

[gregory hutchinson]

sent privately.

[gregory hutchinson]

Sixuan,

Did you get that email? And was it helpful? Anything else you need from me to help work through this?

[Sixuan Liu]

Hey, I replied your email that day privately as well. Please check?

[gregory hutchinson]

found it in and replied. thank you!