Stripe direct charges #2721
Description
Currently, Liberapay only supports processing donations through Stripe if it can use either a “destination charge” or a “separate transfer”. Implementing the third possibility, “direct charges”, would enable creators in a few more countries to use a Stripe account with Liberapay.
This would be accomplished by cloning the donor's payment method from Liberapay's Stripe account to the recipient's Stripe account for every payment, thus denying the recipient the power to initiate charges.
When used with standard Stripe accounts, cloning a payment method would enable the recipient to see the name of the donor, so we would disable secret donations and warn donors like we currently do for payments through PayPal.
When used with custom Stripe accounts (#2324), we could keep the donor's name secret if we didn't give the recipient access to the payments embedded component.