Skip to main content

Payment Processing Flow

This sequence diagram illustrates the payment processing flow using Stripe integration for various transactions in the TunnelFlight platform.

Standard Payment Flow​

Subscription Payment Flow​

Refund Processing Flow​

Webhook Processing Flow​

Security Measures​

  • PCI Compliance: Card details never touch our servers (handled by Stripe.js)
  • Webhook Verification: All webhooks verified using Stripe signatures
  • Idempotency: Duplicate webhook events are ignored
  • SSL/TLS: All payment communications use HTTPS
  • Tokenization: Card details replaced with secure tokens
  • Rate Limiting: Payment endpoints are rate-limited
  • Audit Trail: All payment events logged for compliance