jennie/ghostguild-org
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(helcim): accept signup-bridge cookie in verify-payment
All checks were successful
Test / vitest (push) Successful in 13m42s
Details
Test / playwright (push) Successful in 19m35s
Details
Test / Notify on failure (push) Has been skipped
Details

Browse source 
Membership signup verifies the card before email verification, so the
signup-bridge cookie set by /api/helcim/customer now satisfies auth in
verify-payment when no session exists. Adds a cloudflared tunnel script
for testing the Helcim flow locally against a production build.
This commit is contained in:
Jennie Robinson Faber 2026-05-24 14:01:02 +01:00
parent 151481f1ec
commit 10a28ac5ef
3 changed files with 107 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

9
server/api/helcim/verify-payment.post.js
View file

@ -1,12 +1,17 @@
// Verify payment token from HelcimPay.js
import { requireAuth } from '../../utils/auth.js'
import { requireAuth, getSignupBridgeMember } from '../../utils/auth.js'
import { validateBody } from '../../utils/validateBody.js'
import { paymentVerifySchema } from '../../utils/schemas.js'
import { listHelcimCustomerCards } from '../../utils/helcim.js'
export default defineEventHandler(async (event) => {
try {
await requireAuth(event)
// Membership signup verifies the card before email verify; allow the
// signup-bridge cookie set by /api/helcim/customer to satisfy auth here.
const bridgeMember = await getSignupBridgeMember(event)
if (!bridgeMember) {
await requireAuth(event)
}
const body = await validateBody(event, paymentVerifySchema)
// Verify the card token by fetching the customer's cards from Helcim