Payment Failure Magic Links

Payment Failure is one of our most important critical paths and ultimately Payment Update is our most used feature.

Unlike all the other email campaigns which are sent to Braze from guardian/membership-workflow the payment failure campaigns (PF1 - PF5) also go through guardian/identity-processes/payment-failure (as an extra step before Braze) where the link to the Payment Update Flow in manage has encryptedEmail and autoSignInToken URL params appended to make it magically sign the user in.

Note though that this magical sign-in is 'scoped' to only the payment flow (/payment/*) using the X-GU-ID-FORWARDED-SCOPE header, which is sent on every request as part of the wiki/Identity-Integration.

It's important to talk to Identity team about this as they own most of this process.