As of 14 September 2019 European card issuers, including VISA, Mastercard, and AmEx in Europe, will require Strong Customer Authentication, or SCA (https://stripe.com/docs/strong-customer-authentication) in order to approve credit card transactions. This standard extends the current. “3D Secure” authentication used by some. Stripe already support this through its PaymentIntents API workflow, which replaces the current token-based workflow. There is a PaymentIntents migration guide: https://stripe.com/docs/payments/payment-intents/migration and a more specific SCA migration guide: https://stripe.com/docs/strong-customer-authentication

#2959726: Upgrade to stripe v3 to achieve SAQ A PCI compliance is a D8 prerequisite for migration to PaymentIntents.

Migration to paymentIntents is needed to prevent a high rate of declines of European customers from Sept 14th 2019 onwards.

Comments

AndraeRay created an issue. See original summary.

andraeray’s picture

andraeray commented
Status: Fixed » Active
TheDucksLover’s picture

TheDucksLover commented

Is there any news about the D8 version of uc_stripe concerning the SCA?

andraeray’s picture

andraeray commented
Issue summary: View changes
andraeray’s picture

andraeray commented

#2859843: Upgrade stripe library to stripe/stripe-php version 6.* has been completed to upgrade the stripe API, but there's a few more things to be done to make it SCA compliant. I have been working on a few other projects and haven't spent much time on this lately.

TheDucksLover’s picture

TheDucksLover commented

Is there anything I could do / try to do to help you finish this? I checked the other possibilities of payments on ubercart (D8) and it looks like this module is the only one that's worth it, I can't even find a regular bank transfer module ^^', so if I could be of any help, feel free to ask

andraeray’s picture

andraeray commented
Version: 8.x-2.x-dev » 8.x-3.x-dev

Hi

Thanks for offering to help. Do you know how to develop and create patches? I'd be glad to review them and add them quickly.

Sorry the progress has been so slow, I actually don't use the D8 Version of this module for any of my sites or my clients' sites. So thus far I have been working on this mainly in my free time.

BTW, I have created a 3.x dev branch for this module.

TheDucksLover’s picture

TheDucksLover commented

Well yes I do, but I'm more sceptical about what needs to be done :-) I have used Stripe already but I have 0 knowledge of the new SCA thing and where to start, what to do (plus I'd need to do that in my free time too but well if you tell me it can be done in a few hours, I could manage to find the time)

TheDucksLover’s picture

TheDucksLover commented

Hi. Have you had time to consider finishing the module? :-)

andraeray’s picture

andraeray commented

Sorry for late response to #8. I really can't comment on how easy or hard it will be. D7 version took me upwards of 50 hours between development and testing. Stripe does have excellent documentation, so that can help you along. The D8 version might be somewhat easier since it doesn't have recurring charges, but I'm expecting at least 15+ hours for myself.

The D8 version is something I will definitely work on, It's just a matter of finding the time. I freelance independently, so the progress will probably be slow since D8 version is not used for any of my projects, or client's projects.

mrphilipwarner’s picture

mrphilipwarner commented

+1 for this request

mrphilipwarner’s picture

mrphilipwarner commented

Is there a roadmap for supporting SCA in the Drupal 8 module? It would be helpful to understand our options if this is not going to be supported in time for the end of this year.