Review request

Internal tool for my team built in Bolt, feedback on the Stripe checkout wanted

Solved · 6 views · asked by tomvibes · edited

Repo or live app

internal-deposits.vercel.app

Not customer-facing, but we do take card payments from clients for deposits through this. Bolt set up Stripe Checkout for me and it works in test mode. Before we flip to live keys I'd like someone who has actually shipped Stripe before to look at it.

Comment

1 answer

Marked as helpful by the asker
priya_ships · edited

Checkout session setup looks right. What I'd add before going live: you're trusting the amount from the frontend when creating the session. Move that to the server, look up the deposit amount from your own bookings table by id instead of accepting it as a parameter, otherwise anyone can pay €1 for a €200 deposit by editing the request.

Also set up the webhook for checkout.session.completed before flipping keys, not after, it's how you'll know a payment actually landed.

Comment