You render a UUID into the browser form and send it along with the submission however you want (post input, http header, etc). Then the server both requires the UUID to be there and passes it along to stripe.
Stripe will not allow an idempotent key to be reused w/i 24 hours.
You can use anything for the idempotent key and Stripe will actually track that along with the charge object so you can use something more meaningful if it's useful for your business.
edit: and if you generate a key that's more meaningful I'd be careful about leaking important/private data.
Stripe will not allow an idempotent key to be reused w/i 24 hours.
You can use anything for the idempotent key and Stripe will actually track that along with the charge object so you can use something more meaningful if it's useful for your business.
edit: and if you generate a key that's more meaningful I'd be careful about leaking important/private data.