wenn checkout.completed kommt, senden wir jetzt transaction_id +

checkout_id direkt an das Backend, damit der Server die Session via Paddle‑API finalisiert (auch wenn der Webhook
  nicht greift). Dadurch sollte “Zahlung wird verarbeitet” nicht mehr hängen bleiben.

app/Http/Controllers/CheckoutController.php

@@ -5,6 +5,7 @@ namespace App\Http\Controllers;
 use App\Http\Requests\Checkout\CheckoutFreeActivationRequest;
 use App\Http\Requests\Checkout\CheckoutLoginRequest;
 use App\Http\Requests\Checkout\CheckoutRegisterRequest;
+use App\Http\Requests\Checkout\CheckoutSessionConfirmRequest;
 use App\Http\Requests\Checkout\CheckoutSessionStatusRequest;
 use App\Mail\Welcome;
 use App\Models\AbandonedCheckout;
@@ -268,6 +269,47 @@ class CheckoutController extends Controller
         ]);
     }
 
+    public function confirmSession(
+        CheckoutSessionConfirmRequest $request,
+        CheckoutSession $session,
+        CheckoutSessionService $sessions,
+        CheckoutAssignmentService $assignment,
+        PaddleTransactionService $transactions,
+    ): JsonResponse {
+        $validated = $request->validated();
+        $transactionId = $validated['transaction_id'] ?? null;
+        $checkoutId = $validated['checkout_id'] ?? null;
+
+        $metadata = $session->provider_metadata ?? [];
+        $metadataUpdated = false;
+
+        if ($transactionId) {
+            $session->paddle_transaction_id = $transactionId;
+            $metadata['paddle_transaction_id'] = $transactionId;
+            $metadataUpdated = true;
+        }
+
+        if ($checkoutId) {
+            $metadata['paddle_checkout_id'] = $checkoutId;
+            $metadataUpdated = true;
+        }
+
+        if ($metadataUpdated) {
+            $metadata['paddle_client_event_at'] = now()->toIso8601String();
+            $session->provider_metadata = $metadata;
+            $session->save();
+        }
+
+        $this->attemptPaddleRecovery($session, $sessions, $assignment, $transactions);
+
+        $session->refresh();
+
+        return response()->json([
+            'status' => $session->status,
+            'completed_at' => optional($session->completed_at)->toIso8601String(),
+        ]);
+    }
+
     public function trackAbandonedCheckout(Request $request)
     {
         $validated = $request->validate([

app/Http/Requests/Checkout/CheckoutSessionConfirmRequest.php

@@ -0,0 +1,50 @@
+<?php
+
+namespace App\Http\Requests\Checkout;
+
+use App\Models\CheckoutSession;
+use Illuminate\Foundation\Http\FormRequest;
+
+class CheckoutSessionConfirmRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        $session = $this->route('session');
+
+        if (! $session instanceof CheckoutSession) {
+            return false;
+        }
+
+        $user = $this->user();
+
+        if (! $user) {
+            return false;
+        }
+
+        return (int) $session->user_id === (int) $user->id;
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, \Illuminate\Contracts\Validation\ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'transaction_id' => ['nullable', 'string', 'required_without:checkout_id'],
+            'checkout_id' => ['nullable', 'string', 'required_without:transaction_id'],
+        ];
+    }
+
+    public function messages(): array
+    {
+        return [
+            'transaction_id.required_without' => 'Transaction ID oder Checkout ID fehlt.',
+            'checkout_id.required_without' => 'Checkout ID oder Transaction ID fehlt.',
+        ];
+    }
+}