WIX-PAY API Security Consideration

Ask the community
,
1

I have successfully implemented a custom payment flow using the WIX-PAY API such as the example here .

I have been paying extra attention to the architecture of my code to ensure I take all considerations as it relates to security.

Per the note at the end of the tutorial re: Security Considerations , I have ensured that I have defined my Payment Information in the backend and avoided passing those details from the client-side code, except for quantity, which is selected by the user on the UI.

How do I securely include elements such as quantity in the Payment Information when they are only available on the client-side (e.g., on the UI)?

Background/Context:
I’m building a site for a hotel group. Here is the flow:

  1. The user selects a hotel property they wish to book.

  2. The user inputs their check-in, check-out dates, and the number of rooms (equate this to quantity).

  3. The ID of the hotel is passed from the client-side to backend where I query the data collection for all the hotel information (i.e., rates, taxes, etc.).

  4. How do I securely get the quantity to the backend in order to calculate totals and the ultimate crate Product Information?

TIA!