Stripe Card Update Link Not Working: How to Fix It (And Automate Card Updates)

// List all portal configurations to see what's enabled
const configs = await stripe.billingPortal.configurations.list({
  limit: 5,
});

for (const config of configs.data) {
  console.log('Config ID:', config.id);
  console.log('Active:', config.is_default);
  console.log('Payment method update:',
    config.features.payment_method_update.enabled
  );
  console.log('---');
}

// If no configs exist or payment_method_update is false,
// that's why your links aren't working.

// First: create or update your portal configuration
const configuration = await stripe.billingPortal.configurations.create({
  business_profile: {
    headline: 'Manage your subscription',
  },
  features: {
    payment_method_update: {
      enabled: true,  // This is the critical flag
    },
    // Optional: enable other features
    subscription_cancel: {
      enabled: true,
      mode: 'at_period_end',
    },
    invoice_history: {
      enabled: true,
    },
  },
});

console.log('Portal config created:', configuration.id);

// Generate a session for a specific customer
const session = await stripe.billingPortal.sessions.create({
  customer: 'cus_xxx',  // Must be the correct customer ID
  return_url: 'https://yourapp.com/account',  // Absolute URL required
  // Optional: use a specific configuration
  // configuration: 'bpc_xxx',
});

// This URL is valid for 24 hours
console.log('Card update link:', session.url);
// e.g. "https://billing.stripe.com/p/session/test_abc123"

// Send this URL via email immediately
await sendEmail({
  to: customer.email,
  subject: 'Update your payment method',
  body: `Click here to update your card: ${session.url}`,
});

// Better pattern: generate the session when the customer clicks
// This avoids the 24-hour expiry problem entirely
app.get('/update-card/:customerId', async (req, res) => {
  const { customerId } = req.params;

  // Verify the customer exists
  try {
    await stripe.customers.retrieve(customerId);
  } catch (err) {
    return res.status(404).json({ error: 'Customer not found' });
  }

  const session = await stripe.billingPortal.sessions.create({
    customer: customerId,
    return_url: `https://yourapp.com/account`,
  });

  // Redirect to the fresh session
  res.redirect(303, session.url);
});

// Email the customer a link to YOUR endpoint instead
// e.g. https://yourapp.com/update-card/cus_xxx
// The session is created fresh when they click. never expires

// Without SaveMRR, you'd build all of this:

// 1. Portal configuration management
const config = await stripe.billingPortal.configurations.create({
  features: { payment_method_update: { enabled: true } },
});

// 2. On-demand session generation endpoint
app.get('/update-card/:token', async (req, res) => {
  const customer = await decodeToken(req.params.token);
  const session = await stripe.billingPortal.sessions.create({
    customer: customer.stripeId,
    return_url: process.env.APP_URL + '/account',
  });
  res.redirect(303, session.url);
});

// 3. Webhook to detect failed payments
app.post('/webhooks/stripe', async (req, res) => {
  const event = stripe.webhooks.constructEvent(req.body, sig, secret);
  if (event.type === 'invoice.payment_failed') {
    const invoice = event.data.object;
    const token = generateToken(invoice.customer);
    const updateUrl = `https://yourapp.com/update-card/${token}`;
    await sendDunningEmail(invoice.customer, updateUrl);
    await scheduleDunningSequence(invoice.customer, updateUrl);
  }
  res.json({ received: true });
});

// 4. Dunning email sequence with fresh links
// 5. Card update tracking
// 6. Mobile-compatible link handling
// 7. Error handling, retries, logging...

// SaveMRR handles ALL of the above.
// Paste your API key → card update links work automatically.