@gomusdev/web-components 4.8.2 → 4.9.1

package/README.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 4.9.1 (2026-07-20)
+
+### Bug Fixes
+
+* **checkoutForm:** handle meta.status and payment_data on checkout, closes [#152](https://gitlab.giantmonkey.de/gomus/frontend/issues/152)
+
+## 4.9.0 (2026-07-16)
+
+### Features
+
+* **auth:** add go-set-password to complete the password reset flow, closes [#96](https://gitlab.giantmonkey.de/gomus/frontend/issues/96)
+
 ## 4.8.2 (2026-07-16)
 
 ### Bug Fixes

package/dist-js/components/auth/setPassword/SetPassword.svelte.d.ts

@@ -0,0 +1 @@
+export { SvelteComponent as default } from 'svelte';

package/dist-js/gomus-webcomponents.iife.js

@@ -12238,6 +12238,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		};
 		return {
 			...finalOptions,
+			quantity: finalOptions.quantity ?? 0,
+			time: finalOptions.time ?? "",
 			type: product.type,
 			product,
 			/**
@@ -12297,7 +12299,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				return this.uuid + ":" + this.quantity;
 			},
 			get price_cents() {
-				if (this.time && this.product.dynamic_prices?.[this.time] != null) return this.product.dynamic_prices[this.time];
+				const dynamicPrices = "dynamic_prices" in this.product ? this.product.dynamic_prices : null;
+				if (this.time && dynamicPrices?.[this.time] != null) return dynamicPrices[this.time];
 				return this.product.price_cents;
 			},
 			get price_formatted() {
@@ -12480,10 +12483,18 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 	//#region src/lib/models/cart/cart.svelte.ts
 	var lastUuid = 0;
 	function createCart(products, contingent = 20) {
+		const items = proxy([]);
+		const coupons = proxy([]);
+		let paymentModeId = /* @__PURE__ */ state(void 0);
 		const cart = {
-			items: proxy([]),
-			coupons: proxy([]),
-			paymentModeId: void 0,
+			items,
+			coupons,
+			get paymentModeId() {
+				return get$2(paymentModeId);
+			},
+			set paymentModeId(value) {
+				set(paymentModeId, value, true);
+			},
 			uid: `cart-${lastUuid++}`,
 			get nonEmptyItems() {
 				return this.items.filter((i) => i.quantity > 0);
@@ -13878,6 +13889,20 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				requiredFields: ["email"]
 			});
 		}
+		/**
+		* Sets a new password using the one-time credentials the backend appends to
+		* the reset-mail redirect (`access-token`, `client`, `uid` query params).
+		* Unlike `updatePassword` no `current_password` is needed — the reset link
+		* flags the session with `allow_password_change`. The 200 response carries
+		* fresh auth headers which AuthMiddleware ingests, signing the customer in.
+		*/
+		setNewPassword(params, headers) {
+			return this.apiPut("/api/v4/auth/password", {
+				body: params,
+				requiredFields: ["password", "password_confirmation"],
+				params: { header: headers }
+			});
+		}
 		activateMembership(params) {
 			return this.apiPost(MEMBERSHIP_ACTIVATION_ENDPOINT, {
 				body: params,
@@ -14258,7 +14283,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 	var getPersonalizationDetails = createGetDetails(KEY$5);
 	//#endregion
 	//#region src/components/annualTicketPersonalization/components/AnnualTicketPersonalization.svelte
-	var root$57 = /* @__PURE__ */ from_html(`<li><a> </a></li>`);
+	var root$58 = /* @__PURE__ */ from_html(`<li><a> </a></li>`);
 	var root_1$21 = /* @__PURE__ */ from_html(`<ul class="go-annual-ticket"><li class="go-annual-ticket-title"> </li> <li class="go-annual-ticket-personalization-count"> </li> <!></ul>`);
 	function AnnualTicketPersonalization($$anchor, $$props) {
 		push($$props, true);
@@ -14293,7 +14318,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				reset(li_1);
 				var node_2 = sibling(li_1, 2);
 				var consequent = ($$anchor) => {
-					var li_2 = root$57();
+					var li_2 = root$58();
 					var a = child(li_2);
 					var text_2 = child(a, true);
 					reset(a);
@@ -14681,7 +14706,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 	function AnnualTicketPersonalizationForm($$anchor, $$props) {
 		push($$props, true);
 		let token = prop($$props, "token", 7), ticketSaleId = prop($$props, "ticketSaleId", 7);
-		let form;
+		let form = null;
 		const details = new PersonalizationDetails();
 		setPersonalizationDetails($$props.$$host, details);
 		user_effect(() => {
@@ -14749,12 +14774,13 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			} };
 			const result = await shop.finalizePersonalizations(token(), body);
 			if (result.error) {
-				form.details.apiErrors = [result.error.error];
+				form.details.apiErrors = result.error.error ? [result.error.error] : [];
 				return;
 			}
 			const beforeSubmit = configStore.config.forms.personalization?.beforeSubmit;
 			if (beforeSubmit) beforeSubmit(body);
-			if (configStore.config.urls.annualTicketPersonalizationFormSubmit?.()) configStore.config.navigateTo(configStore.config.urls.annualTicketPersonalizationFormSubmit());
+			const submitUrl = configStore.config.urls.annualTicketPersonalizationFormSubmit?.(token());
+			if (submitUrl) configStore.config.navigateTo(submitUrl);
 		}
 		let templateForm = null;
 		let templateBlueprint = null;
@@ -14979,7 +15005,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 	}
 	//#endregion
 	//#region src/components/forms/ui/generic/Form.svelte
-	var root$56 = /* @__PURE__ */ from_html(`<go-all-fields></go-all-fields> <go-form-feedback><go-errors-feedback></go-errors-feedback> <go-success-feedback></go-success-feedback></go-form-feedback> <go-submit> </go-submit>`, 3);
+	var root$57 = /* @__PURE__ */ from_html(`<go-all-fields></go-all-fields> <go-form-feedback><go-errors-feedback></go-errors-feedback> <go-success-feedback></go-success-feedback></go-form-feedback> <go-submit> </go-submit>`, 3);
 	function Form($$anchor, $$props) {
 		push($$props, true);
 		let formId = prop($$props, "formId", 7), custom = prop($$props, "custom", 7);
@@ -15025,7 +15051,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		var fragment = comment();
 		var node = first_child(fragment);
 		var consequent = ($$anchor) => {
-			var fragment_1 = root$56();
+			var fragment_1 = root$57();
 			var go_submit = sibling(sibling(first_child(fragment_1), 2), 2);
 			var text = child(go_submit, true);
 			reset(go_submit);
@@ -15052,10 +15078,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 	}, [], ["details"]));
 	//#endregion
 	//#region src/components/auth/passwordReset/PasswordReset.svelte
-	var root$55 = /* @__PURE__ */ from_html(`<go-form></go-form>`, 2);
+	var root$56 = /* @__PURE__ */ from_html(`<go-form></go-form>`, 2);
 	function PasswordReset($$anchor, $$props) {
 		push($$props, true);
-		let custom = prop($$props, "custom", 7, false);
+		let custom = prop($$props, "custom", 7, false), redirectUrl = prop($$props, "redirectUrl", 7, "");
 		Forms.defineForm({
 			id: "passwordReset",
 			submitLabel: "user.passwordReset.actions.requestPasswordReset",
@@ -15066,7 +15092,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		});
 		async function passwordReset(event) {
 			const details = event.target.details;
-			const result = await shop.passwordReset(details.formData);
+			const params = details.formData;
+			const result = await shop.passwordReset(redirectUrl() ? {
+				...params,
+				redirect_url: redirectUrl()
+			} : params);
 			if (result.data) {
 				$$props.$$host.dispatchEvent(new Event("go-success", {
 					bubbles: true,
@@ -15083,16 +15113,105 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			set custom($$value = false) {
 				custom($$value);
 				flushSync();
+			},
+			get redirectUrl() {
+				return redirectUrl();
+			},
+			set redirectUrl($$value = "") {
+				redirectUrl($$value);
+				flushSync();
 			}
 		};
-		var go_form = root$55();
+		var go_form = root$56();
 		set_custom_element_data(go_form, "formId", "passwordReset");
 		template_effect(() => set_custom_element_data(go_form, "custom", custom()));
 		event("submit", go_form, passwordReset);
 		append($$anchor, go_form);
 		return pop($$exports);
 	}
-	customElements.define("go-password-reset", create_custom_element(PasswordReset, { custom: {} }, [], []));
+	customElements.define("go-password-reset", create_custom_element(PasswordReset, {
+		redirectUrl: {
+			attribute: "redirect-url",
+			type: "String"
+		},
+		custom: {}
+	}, [], []));
+	//#endregion
+	//#region src/components/auth/setPassword/SetPassword.svelte
+	var root$55 = /* @__PURE__ */ from_html(`<go-form></go-form>`, 2);
+	function SetPassword($$anchor, $$props) {
+		push($$props, true);
+		let accessToken = prop($$props, "accessToken", 7, ""), client = prop($$props, "client", 7, ""), uid = prop($$props, "uid", 7, "");
+		Forms.defineForm({
+			id: "setPassword",
+			submitLabel: "user.passwordReset.actions.resetPassword",
+			fields: [{
+				key: "newPassword",
+				required: true
+			}, {
+				key: "confirmPassword",
+				required: true
+			}]
+		});
+		async function setNewPassword(event) {
+			const details = event.target.details;
+			const result = await shop.setNewPassword(details.formData, {
+				"access-token": accessToken(),
+				client: client(),
+				uid: uid()
+			});
+			if (result.data) {
+				$$props.$$host.dispatchEvent(new Event("go-success", {
+					bubbles: true,
+					composed: true
+				}));
+				details.successMessage = result.data.message;
+				details.apiErrors = [];
+			} else details.apiErrors = result.error.errors;
+		}
+		var $$exports = {
+			get accessToken() {
+				return accessToken();
+			},
+			set accessToken($$value = "") {
+				accessToken($$value);
+				flushSync();
+			},
+			get client() {
+				return client();
+			},
+			set client($$value = "") {
+				client($$value);
+				flushSync();
+			},
+			get uid() {
+				return uid();
+			},
+			set uid($$value = "") {
+				uid($$value);
+				flushSync();
+			}
+		};
+		var go_form = root$55();
+		set_custom_element_data(go_form, "formId", "setPassword");
+		event("submit", go_form, setNewPassword);
+		append($$anchor, go_form);
+		return pop($$exports);
+	}
+	customElements.define("go-set-password", create_custom_element(SetPassword, {
+		accessToken: {
+			attribute: "access-token",
+			type: "String"
+		},
+		client: {
+			attribute: "client",
+			type: "String"
+		},
+		uid: {
+			attribute: "uid",
+			type: "String"
+		}
+	}, [], []));
 	//#endregion
 	//#region src/components/auth/signIn/SignIn.svelte
 	function SignIn($$anchor, $$props) {
@@ -18404,6 +18523,20 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 	customElements.define("go-cart-counter", create_custom_element(CartCounter, {}, [], []));
 	//#endregion
 	//#region src/components/checkoutForm/lib.ts
+	function postToPaymentProvider(paymentData) {
+		const form = document.createElement("form");
+		form.method = "post";
+		form.action = paymentData.url;
+		for (const [key, value] of Object.entries(paymentData.params)) {
+			const input = document.createElement("input");
+			input.type = "hidden";
+			input.name = key;
+			input.value = String(value);
+			form.appendChild(input);
+		}
+		document.body.appendChild(form);
+		form.submit();
+	}
 	async function finalizeCheckout(form, formId) {
 		const cart = shop.cart;
 		if (!cart) return;
@@ -18416,8 +18549,13 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		}
 		const beforeSubmit = configStore.config.forms[formId]?.beforeSubmit;
 		if (beforeSubmit) await beforeSubmit(form.details.formData);
-		const paymentUrl = checkout.data.meta.payment_url;
-		configStore.config.navigateTo?.(paymentUrl);
+		const meta = checkout.data.meta;
+		const navigateTo = configStore.config.navigateTo;
+		if (meta.status === "success") navigateTo?.(shop.urls.checkoutSuccess(checkout.data.order.token));
+		else if (meta.status === "fail") navigateTo?.(shop.urls.checkoutFailure(""));
+		else if (meta.payment_url) navigateTo?.(meta.payment_url);
+		else if (meta.payment_data) postToPaymentProvider(meta.payment_data);
+		else navigateTo?.(shop.urls.checkoutFailure(""));
 	}
 	function setupGuestCheckout(host, custom) {
 		Forms.defineForm({

package/dist-js/gomus-webcomponents.js

@@ -12237,6 +12237,8 @@ function createCartItem(product, options) {
 	};
 	return {
 		...finalOptions,
+		quantity: finalOptions.quantity ?? 0,
+		time: finalOptions.time ?? "",
 		type: product.type,
 		product,
 		/**
@@ -12296,7 +12298,8 @@ function createCartItem(product, options) {
 			return this.uuid + ":" + this.quantity;
 		},
 		get price_cents() {
-			if (this.time && this.product.dynamic_prices?.[this.time] != null) return this.product.dynamic_prices[this.time];
+			const dynamicPrices = "dynamic_prices" in this.product ? this.product.dynamic_prices : null;
+			if (this.time && dynamicPrices?.[this.time] != null) return dynamicPrices[this.time];
 			return this.product.price_cents;
 		},
 		get price_formatted() {
@@ -12479,10 +12482,18 @@ var defined = (x) => x !== void 0;
 //#region src/lib/models/cart/cart.svelte.ts
 var lastUuid = 0;
 function createCart(products, contingent = 20) {
+	const items = proxy([]);
+	const coupons = proxy([]);
+	let paymentModeId = /* @__PURE__ */ state(void 0);
 	const cart = {
-		items: proxy([]),
-		coupons: proxy([]),
-		paymentModeId: void 0,
+		items,
+		coupons,
+		get paymentModeId() {
+			return get$2(paymentModeId);
+		},
+		set paymentModeId(value) {
+			set(paymentModeId, value, true);
+		},
 		uid: `cart-${lastUuid++}`,
 		get nonEmptyItems() {
 			return this.items.filter((i) => i.quantity > 0);
@@ -13877,6 +13888,20 @@ var Shop = class {
 			requiredFields: ["email"]
 		});
 	}
+	/**
+	* Sets a new password using the one-time credentials the backend appends to
+	* the reset-mail redirect (`access-token`, `client`, `uid` query params).
+	* Unlike `updatePassword` no `current_password` is needed — the reset link
+	* flags the session with `allow_password_change`. The 200 response carries
+	* fresh auth headers which AuthMiddleware ingests, signing the customer in.
+	*/
+	setNewPassword(params, headers) {
+		return this.apiPut("/api/v4/auth/password", {
+			body: params,
+			requiredFields: ["password", "password_confirmation"],
+			params: { header: headers }
+		});
+	}
 	activateMembership(params) {
 		return this.apiPost(MEMBERSHIP_ACTIVATION_ENDPOINT, {
 			body: params,
@@ -14257,7 +14282,7 @@ var setPersonalizationDetails = createSetDetails(KEY$5);
 var getPersonalizationDetails = createGetDetails(KEY$5);
 //#endregion
 //#region src/components/annualTicketPersonalization/components/AnnualTicketPersonalization.svelte
-var root$57 = /* @__PURE__ */ from_html(`<li><a> </a></li>`);
+var root$58 = /* @__PURE__ */ from_html(`<li><a> </a></li>`);
 var root_1$21 = /* @__PURE__ */ from_html(`<ul class="go-annual-ticket"><li class="go-annual-ticket-title"> </li> <li class="go-annual-ticket-personalization-count"> </li> <!></ul>`);
 function AnnualTicketPersonalization($$anchor, $$props) {
 	push($$props, true);
@@ -14292,7 +14317,7 @@ function AnnualTicketPersonalization($$anchor, $$props) {
 			reset(li_1);
 			var node_2 = sibling(li_1, 2);
 			var consequent = ($$anchor) => {
-				var li_2 = root$57();
+				var li_2 = root$58();
 				var a = child(li_2);
 				var text_2 = child(a, true);
 				reset(a);
@@ -14680,7 +14705,7 @@ function errors(fields) {
 function AnnualTicketPersonalizationForm($$anchor, $$props) {
 	push($$props, true);
 	let token = prop($$props, "token", 7), ticketSaleId = prop($$props, "ticketSaleId", 7);
-	let form;
+	let form = null;
 	const details = new PersonalizationDetails();
 	setPersonalizationDetails($$props.$$host, details);
 	user_effect(() => {
@@ -14748,12 +14773,13 @@ function AnnualTicketPersonalizationForm($$anchor, $$props) {
 		} };
 		const result = await shop.finalizePersonalizations(token(), body);
 		if (result.error) {
-			form.details.apiErrors = [result.error.error];
+			form.details.apiErrors = result.error.error ? [result.error.error] : [];
 			return;
 		}
 		const beforeSubmit = configStore.config.forms.personalization?.beforeSubmit;
 		if (beforeSubmit) beforeSubmit(body);
-		if (configStore.config.urls.annualTicketPersonalizationFormSubmit?.()) configStore.config.navigateTo(configStore.config.urls.annualTicketPersonalizationFormSubmit());
+		const submitUrl = configStore.config.urls.annualTicketPersonalizationFormSubmit?.(token());
+		if (submitUrl) configStore.config.navigateTo(submitUrl);
 	}
 	let templateForm = null;
 	let templateBlueprint = null;
@@ -14978,7 +15004,7 @@ function wrapInElement(host, tag, props) {
 }
 //#endregion
 //#region src/components/forms/ui/generic/Form.svelte
-var root$56 = /* @__PURE__ */ from_html(`<go-all-fields></go-all-fields> <go-form-feedback><go-errors-feedback></go-errors-feedback> <go-success-feedback></go-success-feedback></go-form-feedback> <go-submit> </go-submit>`, 3);
+var root$57 = /* @__PURE__ */ from_html(`<go-all-fields></go-all-fields> <go-form-feedback><go-errors-feedback></go-errors-feedback> <go-success-feedback></go-success-feedback></go-form-feedback> <go-submit> </go-submit>`, 3);
 function Form($$anchor, $$props) {
 	push($$props, true);
 	let formId = prop($$props, "formId", 7), custom = prop($$props, "custom", 7);
@@ -15024,7 +15050,7 @@ function Form($$anchor, $$props) {
 	var fragment = comment();
 	var node = first_child(fragment);
 	var consequent = ($$anchor) => {
-		var fragment_1 = root$56();
+		var fragment_1 = root$57();
 		var go_submit = sibling(sibling(first_child(fragment_1), 2), 2);
 		var text = child(go_submit, true);
 		reset(go_submit);
@@ -15051,10 +15077,10 @@ customElements.define("go-form", create_custom_element(Form, {
 }, [], ["details"]));
 //#endregion
 //#region src/components/auth/passwordReset/PasswordReset.svelte
-var root$55 = /* @__PURE__ */ from_html(`<go-form></go-form>`, 2);
+var root$56 = /* @__PURE__ */ from_html(`<go-form></go-form>`, 2);
 function PasswordReset($$anchor, $$props) {
 	push($$props, true);
-	let custom = prop($$props, "custom", 7, false);
+	let custom = prop($$props, "custom", 7, false), redirectUrl = prop($$props, "redirectUrl", 7, "");
 	Forms.defineForm({
 		id: "passwordReset",
 		submitLabel: "user.passwordReset.actions.requestPasswordReset",
@@ -15065,7 +15091,11 @@ function PasswordReset($$anchor, $$props) {
 	});
 	async function passwordReset(event) {
 		const details = event.target.details;
-		const result = await shop.passwordReset(details.formData);
+		const params = details.formData;
+		const result = await shop.passwordReset(redirectUrl() ? {
+			...params,
+			redirect_url: redirectUrl()
+		} : params);
 		if (result.data) {
 			$$props.$$host.dispatchEvent(new Event("go-success", {
 				bubbles: true,
@@ -15082,16 +15112,105 @@ function PasswordReset($$anchor, $$props) {
 		set custom($$value = false) {
 			custom($$value);
 			flushSync();
+		},
+		get redirectUrl() {
+			return redirectUrl();
+		},
+		set redirectUrl($$value = "") {
+			redirectUrl($$value);
+			flushSync();
 		}
 	};
-	var go_form = root$55();
+	var go_form = root$56();
 	set_custom_element_data(go_form, "formId", "passwordReset");
 	template_effect(() => set_custom_element_data(go_form, "custom", custom()));
 	event("submit", go_form, passwordReset);
 	append($$anchor, go_form);
 	return pop($$exports);
 }
-customElements.define("go-password-reset", create_custom_element(PasswordReset, { custom: {} }, [], []));
+customElements.define("go-password-reset", create_custom_element(PasswordReset, {
+	redirectUrl: {
+		attribute: "redirect-url",
+		type: "String"
+	},
+	custom: {}
+}, [], []));
+//#endregion
+//#region src/components/auth/setPassword/SetPassword.svelte
+var root$55 = /* @__PURE__ */ from_html(`<go-form></go-form>`, 2);
+function SetPassword($$anchor, $$props) {
+	push($$props, true);
+	let accessToken = prop($$props, "accessToken", 7, ""), client = prop($$props, "client", 7, ""), uid = prop($$props, "uid", 7, "");
+	Forms.defineForm({
+		id: "setPassword",
+		submitLabel: "user.passwordReset.actions.resetPassword",
+		fields: [{
+			key: "newPassword",
+			required: true
+		}, {
+			key: "confirmPassword",
+			required: true
+		}]
+	});
+	async function setNewPassword(event) {
+		const details = event.target.details;
+		const result = await shop.setNewPassword(details.formData, {
+			"access-token": accessToken(),
+			client: client(),
+			uid: uid()
+		});
+		if (result.data) {
+			$$props.$$host.dispatchEvent(new Event("go-success", {
+				bubbles: true,
+				composed: true
+			}));
+			details.successMessage = result.data.message;
+			details.apiErrors = [];
+		} else details.apiErrors = result.error.errors;
+	}
+	var $$exports = {
+		get accessToken() {
+			return accessToken();
+		},
+		set accessToken($$value = "") {
+			accessToken($$value);
+			flushSync();
+		},
+		get client() {
+			return client();
+		},
+		set client($$value = "") {
+			client($$value);
+			flushSync();
+		},
+		get uid() {
+			return uid();
+		},
+		set uid($$value = "") {
+			uid($$value);
+			flushSync();
+		}
+	};
+	var go_form = root$55();
+	set_custom_element_data(go_form, "formId", "setPassword");
+	event("submit", go_form, setNewPassword);
+	append($$anchor, go_form);
+	return pop($$exports);
+}
+customElements.define("go-set-password", create_custom_element(SetPassword, {
+	accessToken: {
+		attribute: "access-token",
+		type: "String"
+	},
+	client: {
+		attribute: "client",
+		type: "String"
+	},
+	uid: {
+		attribute: "uid",
+		type: "String"
+	}
+}, [], []));
 //#endregion
 //#region src/components/auth/signIn/SignIn.svelte
 function SignIn($$anchor, $$props) {
@@ -18403,6 +18522,20 @@ function CartCounter($$anchor, $$props) {
 customElements.define("go-cart-counter", create_custom_element(CartCounter, {}, [], []));
 //#endregion
 //#region src/components/checkoutForm/lib.ts
+function postToPaymentProvider(paymentData) {
+	const form = document.createElement("form");
+	form.method = "post";
+	form.action = paymentData.url;
+	for (const [key, value] of Object.entries(paymentData.params)) {
+		const input = document.createElement("input");
+		input.type = "hidden";
+		input.name = key;
+		input.value = String(value);
+		form.appendChild(input);
+	}
+	document.body.appendChild(form);
+	form.submit();
+}
 async function finalizeCheckout(form, formId) {
 	const cart = shop.cart;
 	if (!cart) return;
@@ -18415,8 +18548,13 @@ async function finalizeCheckout(form, formId) {
 	}
 	const beforeSubmit = configStore.config.forms[formId]?.beforeSubmit;
 	if (beforeSubmit) await beforeSubmit(form.details.formData);
-	const paymentUrl = checkout.data.meta.payment_url;
-	configStore.config.navigateTo?.(paymentUrl);
+	const meta = checkout.data.meta;
+	const navigateTo = configStore.config.navigateTo;
+	if (meta.status === "success") navigateTo?.(shop.urls.checkoutSuccess(checkout.data.order.token));
+	else if (meta.status === "fail") navigateTo?.(shop.urls.checkoutFailure(""));
+	else if (meta.payment_url) navigateTo?.(meta.payment_url);
+	else if (meta.payment_data) postToPaymentProvider(meta.payment_data);
+	else navigateTo?.(shop.urls.checkoutFailure(""));
 }
 function setupGuestCheckout(host, custom) {
 	Forms.defineForm({