3 ms·
It looks like they provide pin.js so that your server never has to accept the credit card details, but rather a single-use token (much like Stripe, I believe).
by brycecammo 14y ago
It looks like they provide pin.js so that your server never has to accept the credit card details, but rather a single-use token (much like Stripe, I believe).
https://pin.net.au/docs/pin_js https://pin.net.au/docs/pin_js
- noveltyaccount 14y agoOh, that's cool, thanks for the docs link. I like the way the API hijacks the form submit and replaces the card with the token. I'm still a but curious as to what a nefarious user could do with your "publishable API key," but this is much better than I had initially thought.
- brycecammo 14y ago> I'm still a but curious as to what a nefarious user could do with your "publishable API key," I suspect very little if they don't also have your 'secret' API key. I guess they could request a single-use token for a card, but I don't think they could then do anything with it.