We fixed issues with the Stripe 3DS implementation where our system was not properly handling the reuse of card tokens in certain 3DS scenarios.

The flow should be as follows - Pass in a returnUrl and the user will be prompted with 3DS if the processor/bank so chooses. Don't pass in a returnUrl and either a) the payment succeeds because 3DS isn't supported/required on the card b) the payment succeeds because 3DS is only required the first time and it was already successful or c) the payment fails because 3DS is always required.

In some cases, we've broken the first part where passing in a returnUrl can error if the card always requires 3DS.