Loveshack 1.2.9

Buying a paid tier used to mean signing up for free first, confirming an email,
and only then reaching Checkout. Three steps before anyone could hand you money.
This release removes them.

Paying first

A visitor picks a paid tier and goes straight to Stripe Checkout. On return,
Loveshack fetches the session from Stripe, confirms it is paid and that this site
started it, and then creates the subscriber account, signs them in, and returns
them to the page they came from.

The subscription is synced during that return rather than waiting on the webhook,
so access is live the moment they land back on the site. Accounts created this way
get the default digest frequency, exactly like any other new subscriber.

When the email already has an account

Stripe does not verify that whoever paid actually owns the address they typed. So
when the payer’s email matches an existing subscriber, Loveshack links the payment
to that account and emails a sign-in link instead of signing anyone in.

The payment always lands on the right account. Access to it still requires the
mailbox.

Control

The behaviour is a setting under LoveShack → Subscribers:

• Let visitors pay for a tier before creating an account — on by default

Turn it off to keep the old flow, where a free sign-up and email confirmation come
before payment.

A Checkout session can sign a visitor in once. Returning to the same link later
goes through the normal login.

Also in this release

• readme.txt now carries a full changelog for the 1.1 and 1.2 lines, which had

stopped at 1.0.0

• Coding standards cleanup in the Checkout return handler
• The documentation at <https://docs.loveshack.dev> has been restyled in Tokyo

Night and set in JetBrains Mono