Accessing https://id.resonate.coop/join currently 301-redirects to https://id.resonate.coop/login for me, so I'm unable to join. Are you not accepting new users currently or is this a bug?

Hi, we’re getting this error logging in as an artist:

Forbidden - CSRF token invalid

We have a new upload ready to go, we thought initially it might be wordpress issues. We tried as well in incognito mode, still the same response, so unlikely it’s cookie/browser based.

Thoughts? Help? Words of Wisdom? Coffee coupons?

Thank you!

{
  "error": {
    "code": "parameter_invalid_empty",
    "doc_url": "https://stripe.com/docs/error-codes/parameter-invalid-empty",
    "message": "You passed an empty string for 'line_items'. We assume empty values are an attempt to unset a parameter; however 'line_items' cannot be unset. You should remove 'line_items' from your request or supply a non-empty value.",
    "param": "line_items",
    "request_log_url": "https://dashboard.stripe.com/logs/req_2JgEQ6CGJ2Qxhh?t=1667023632",
    "type": "invalid_request_error"
  }
}

This is happening with quite a few requests. We've only had one report, but I'm seeing it every couple of days in the logs.

Steps to reproduce

1. Click on "Change your email" under the email input box on your profile
2. Enter a new email address.
3. Click on "Update my email".
4. "You have been logged out" appears in bottom left corner.
5. No log out happens, though the page does get refreshed.
6. Email isn't changed
7. Manually log out, and new email doesn't work to log in, old email still works to log in

From polis Email confirmation for share purchasing would be quite helpful, especially as a new member. I paid for shares, dunno if I'm member yet.

https://community.resonate.coop/t/resonate-polis-1-a-poll-and-conversation-leading-into-the-annual-general-meeting/3357

Purchasing shares does not grant member status. This should be more clear. Related: #6

To send this email, we can add additional code here: https://github.com/resonatecoop/id/blob/develop/webhook/stripe_payment.go#L183

A template will need to be added to mailgun.

Change to

1 Euro per share. Supporter shares do not make you a member

technically no one is supposed to be able to buy supporter shares without first becoming a member

I was on the account page, saw the text saying "your changes will take effect on next login" so i logged out, then logged in, but got directed back to the stream page and... it shows I'm still not logged in.

Seen on https://id.resonate.coop/profile

also linguistically and visually this looks odd:

Update peter profile

think a better version of that would be:

Update profile for _____

That should work for a wider range of possible usernames.

from a UX perspective, when I'm on the account page:

https://id.resonate.coop/account

IF i've added a membership or credits, the button should change to "next" or "checkout" not stay as "update" as that doesn't match with a payment process, only for changing display name, country, etc.

or, alternatively, increase email delivery time.

If a listener has purchased a listener subscription, an invite to the forum should be sent to them.

I'm not sure if this is intended or not, but it's confusing to me that when I log in on id.resonate.coop it automatically asks if I want to give the player access and redirects me to it.

I clicked "Access Membership Details" and got this error: