Skip to main content
After Stripe redirects back to the storefront, recover the cart session from tab-scoped storage and poll the protected order-result endpoint.

Result states

Do not treat a redirect, cart lock, timeout, or missing response as success. Keep the capability until terminal handling finishes, then clear it from persisted storage. Guest receipt links place a receipt capability in the URL fragment so browsers do not send it to servers as part of the request URL. Capture it in the browser, immediately remove it with history.replaceState, store it in versioned, tab-scoped sessionStorage keyed by API environment, merchant, and receipt ID, and send it as X-Receipt-Token:
A signed-in customer can access their own order through the customer JWT instead. Receipt identifiers alone never authorize access.

Ratings

Submit a rating while the completed cart capability is still available in memory:

Error Codes

Handle terminal and retryable failures.

SDK Reference

Review all checkout and receipt methods.