← Changelog
· v1.323

Email OTP auth, redesigned sign-in popup and simplified card payment

Secure email OTP authentication

This feature allows store owners to implement secure email one-time password (OTP) authentication. It increases the security of customer accounts during the login process.

Redesigned OTP sign-in popup

The OTP sign-in process has been redesigned to appear as a Shop-style anchored popup. This user-friendly approach enhances the checkout experience and can help reduce cart abandonment.

Simplified single-card payment form

The payment process has been made more straightforward with a simplified single-card payment form. This change is designed to improve the customer experience and speed up transactions.

Also shipped

  • Add central shopper identity handoff
  • Autofocus the search input on the store selector page
  • Native admin forgot/reset password forms
  • Add guest-safe OTP identity flow
  • Detect shopper accounts on email-field blur
  • Polish account and address selection
  • Add restic DB backups to Hetzner Storage Box
  • Validate storefront Origin per store instead of trusting it
  • Native auth forms, drop the auth catch-all

Fixes

  • [account]Derive shopper handoff origins from the store base URL
  • [analytics]Load GTM, MailerLite and Web Connect on builder storefronts
  • [builder]Hide Publish button for mid-migration stores
  • [build]Let Cache Components prerender bailouts through route catch blocks
  • [checkout]Accept the tenant proxy's platform-origin marker
  • [checkout]Align card payment fields
  • [checkout]Allow OTP on alternate storefront domains
  • [checkout]Anchor the OTP popup on every provider and polish it
  • [checkout]Forward a JSON body on bridge sign-out
  • [checkout]Harden the OTP auth surface end to end
  • [checkout]Keep guest state safe across the OTP dialog
  • [checkout]Normalize both sides of the OTP bridge origin check
  • [checkout]Plain try-again-later message for long OTP send waits
  • [checkout]Route storefront logout through the checkout bridge
  • [checkout]Separate guest email from shopper identity
  • [checkout]Tighten card geometry
  • [checkout]Translate the account chip and logout button
  • [db]Complete the v2 relations graph
  • [ai]Flag a chat whose session can't be resumed
  • [ai]Stop the activity row opening onto an empty panel
  • [getresponse]Send a 2-letter locale when creating the shop
  • [getresponse]Use the account's own Web Connect script URL
  • [loyalty]Require authenticated customer ownership
  • [ops]Use pg_dump 18 bindir in backup CI, bypassing pg_wrapper
  • [proxy]Compare storefront origins normalized, not as raw strings
  • [routing]Reserve identity infrastructure subdomains
  • [storefront]Validate login redirects and reroute stray sign-in links