Authentication

Endpoints support both authenticated and anonymous sessions.

• Authenticated users: a session cookie (sessionid) tracks checkout progress.

• Anonymous users: guest checkout is available when the CAN_GUEST_PURCHASE setting is enabled.