Move dumpup out of the way since it's more of an example.

api/authcheck.js

@@ -3,9 +3,13 @@ import { API } from "../lib/api.js";
 
 export const get = async (req, res) => {
   const api = new API(req, res);
+  const { product_id } = req.query;
 
-  // the user should be authenticated already
-  const [paid, payment] = await Payment.paid(api.user);
+  // the user should be authenticated already, so this
+  // will confirm either that the person bought this
+  // specific product, or bought any product when product_id=undefined
+  const paid = await Payment.paid(api.user, product_id);
+  console.log("REQ URL", req.url, "QUERY", req.query, "PAID", paid);
 
   if(!paid) {
     api.error(402, "Payment required to access this course.");