

I have been, but Stripe support hasn’t been helpful.
Update: one of the plugin authors finally explained it well:
It’s because Stripe doesn’t allow the redirect during the OAuth flow to be dynamic. It must be a predefined value that’s hard-coded into the app.
For security purposes, Stripe redirects a user only to a predefined URI.
That’s why Stripe forces you to expose your access tokens to the developer’s servers.
I’d still appreciate if someone with more experience with OAuth than me knows if this is common. Seems like a very bad design decision to require users to transmit their bearer tokens through the developer’s servers.
No, I’m not forced to use Stripe.
I’m looking at mollie now, but I don’t really know of any better alternatives to Stripe. Got a recommendation?
Anything that requires a PayPal account is not an option.
Edit: Mollie won’t let us create an account unless we push >50.000 EUR/mo. Yeah, we’re a small business. We’re wayyy under that limit. So no Mollie :(