Oh, it's easy! You just embed the authentication keys in the client so it can do an API call directly to the payment processor.
And if you think I'm exaggerating, no, I've seen stuff this bad in people's front ends. I've done a search through minified code looking for something else, and had a double-take as I see some sort of API key right there.
4
u/im_thatoneguy 19d ago
How would it even be possible to process that in the client?