Jennie Robinson Faber 9b79ae6bf4 refactor(auth): rename paymentBridge → signupBridge ... After commit 90acc35 issued the cookie for $0 signups too, the "payment" framing was wrong — there's no payment in a $0 signup. The cookie is about bridging the gap between signup-form submit and email verify, not about payment specifically. Changes: - setPaymentBridgeCookie → setSignupBridgeCookie - getPaymentBridgeMember → getSignupBridgeMember - Cookie wire name payment-bridge → signup-bridge - JWT scope payment_bridge → signup_bridge Touches both /api/helcim/subscription (signup activation) and /api/helcim/initialize-payment (paid Helcim checkout) which both consume the cookie. In-flight signup sessions started before this lands will need to re-submit the form (cookie name mismatch); cutover hasn't happened yet, so the only impact is local dev sessions.		2026-04-30 15:31:54 +01:00
..
api	refactor(auth): rename paymentBridge → signupBridge	2026-04-30 15:31:54 +01:00
config	feat(launch): security and correctness fixes for 2026-05-01 launch	2026-04-25 18:42:36 +01:00
helpers	Add Vitest security test suite and update security evaluation doc	2026-03-01 12:30:06 +00:00
middleware	refactor(rate-limit): delegate auth limiting to handlers, add dev bypass	2026-04-27 19:18:34 +01:00
models	chore(slack): remove dead invite path, archive checkSlackJoins poller	2026-04-29 12:34:21 +01:00
utils	chore(slack): remove dead invite path, archive checkSlackJoins poller	2026-04-29 12:34:21 +01:00
setup.js	feat(activation): wire autoFlagPreExistingSlackAccess into self-serve paths	2026-04-29 12:21:12 +01:00