Checkout Session

POST /api/checkout/session

Body:

{
  "orderId": "clxxxxxxxx",
  "token": "checkout-token"
}

Response: { "success": true } plus httpOnly access cookie.

Enter redirect

GET /api/checkout/enter?orderId=...&token=...

Sets the cookie and redirects to the invoice page. Use these after Create Order when you need delivery/keys access without email matching.

⌘I