That seems like one good way of doing it. The other one I can think of is using a widget containing html form generated dynamically by stripe, along with a back link with a unique hash param that verifies it's authenticity.