News for hackers. Stuff that matters.

A comment on Pin is Australia’s first all-in-one payment API. Parent comment

Re:Pin is Australia’s first all-in-one payment API by brycecammo on Thursday June 07, 2012 @08:08PM (#4081997)
It looks like they provide pin.js so that your server never has to accept the credit card details, but rather a single-use token (much like Stripe, I believe).

https://pin.net.au/docs/pin_js

[ Parent | on HN ]
Re:Pin is Australia’s first all-in-one payment API by noveltyaccount on Thursday June 07, 2012 @10:24PM (#4082317)
Oh, that's cool, thanks for the docs link. I like the way the API hijacks the form submit and replaces the card with the token. I'm still a but curious as to what a nefarious user could do with your "publishable API key," but this is much better than I had initially thought.
[ Parent | on HN ]
Re:Pin is Australia’s first all-in-one payment API by brycecammo on Thursday June 07, 2012 @10:42PM (#4082380)
> I'm still a but curious as to what a nefarious user could do with your "publishable API key,"

I suspect very little if they don't also have your 'secret' API key. I guess they could request a single-use token for a card, but I don't think they could then do anything with it.

[ Parent | on HN ]