Stripe SCA Unauthorized API Call

Need help APIs
1

I’m getting an error calling my API Endpoint from Stripe. There is no issue when setting up the initial test webhook. I can also update my Stripe customer from my Bubble App.

I have removed the /initialize and I’m getting the following error:

Screenshot%20(99)

What am I doing wrong?

2

I forgot to enable authorization in the API Workflow tab.

3

Could you say more precisely what “enable authorization in the API Workflow tab” means? The closest I can find is “This endpoint can be run without authentication” but that sounds like a massive security risk. Can’t find any other way to authenticate either from Stripe or Bubble’s API.

4

Stripe is not going to authenticate on your endpoint. It has nothing to do with keeping data secure.

5

Thanks, although that hasn’t really clarified much for me. What do you mean by “enable authorization in the API Workflow tab”? I can get the backend workflow to run by checking “This endpoint can be run without authentication”, but how do I prevent anyone from triggering my backend workflow if Stripe is not going to authenticate on my endpoint?

6

Can you elaborate on your answer? Would be a great help.

Does that mean that you are running your API endpoint with or without the “… run without authentication” box ticked?

image

7

Yes, without authentication, stripe is not going to authenticate on the endpoint itself. Short answer, the checkbox needs to be ticked on.

8

Thanks for your reply!

However, when the box is ticked I get the same error message as you were showing in your original post:

image
image798×211 4.24 KB

How did you setup the authentication? I have set up the Authourization keys in the Stripe plugins (and also tried to replicate the API myself and setting the headers there). The plugins and my own API works perfectly for all other API calls, but not when using it for a webhook.

Can’t wrap my head around what I am missing here, so would greatly appreciate any input!

9

Sent you a message about two hours ago. I’m leaving the meeting room now. I’ll be available from Next monday if you wish to go over it. Feel free to ask the community for support until then!

1 Like