What's new

• Native plugin for EmDash 1.x, tested on 1.3.0.
• Checkout sessions are verified with Stripe before a buyer is logged in, and each one works once.
• Magic-link login with single-use links that expire after 15 minutes. Only a hash of each token is stored.
• Stripe Connect state is bound to the admin who started it, and the returned key is checked against Stripe before it is saved.
• The Stripe key is stored encrypted and requires EMDASH_ENCRYPTION_KEY.
• New editor sidebar panel and Restricted Content screen. Restrictions are keyed by entry ID.
• New getAccess() helper for server-side gating in Astro templates.
• Rate limits on login links, checkout, and verification.
• Vitest coverage for tokens, return paths, checkout, and Connect.

Upgrading from 0.1.x: reconnect Stripe and re-save restrictions from the editor panel.

• Stripe Connect for one-click connection.
• Restrict posts and pages by Stripe product.
• Stripe Checkout for purchases.
• Magic-link email login for returning customers.

• Added a disclosure to the settings page about the 2% Stripe application fee.
• Fixed Checkout session creation for URLs with query strings or anchors.