Guard checkout payment step behind login

resources/js/pages/marketing/checkout/steps/PaymentStep.tsx

@@ -191,6 +191,8 @@ export const PaymentStep: React.FC = () => {
     nextStep,
     paddleConfig,
     authUser,
+    isAuthenticated,
+    goToStep,
     setPaymentCompleted,
     checkoutSessionId,
     setCheckoutSessionId,
@@ -368,6 +370,13 @@ export const PaymentStep: React.FC = () => {
   }, [couponCode]);
 
   const handleFreeActivation = async () => {
+    if (!isAuthenticated || !authUser) {
+      const message = t('checkout.payment_step.auth_required');
+      toast.error(message);
+      goToStep('auth');
+      return;
+    }
+
     if (!selectedPackage) {
       return;
     }
@@ -420,6 +429,15 @@ export const PaymentStep: React.FC = () => {
       return;
     }
 
+    if (!isAuthenticated || !authUser) {
+      const message = t('checkout.payment_step.auth_required');
+      setStatus('error');
+      setMessage(message);
+      toast.error(message);
+      goToStep('auth');
+      return;
+    }
+
     if (!acceptedTerms) {
       setConsentError(t('checkout.legal.checkbox_terms_error'));
       return;
@@ -466,6 +484,18 @@ export const PaymentStep: React.FC = () => {
       });
 
       const rawBody = await response.text();
+      if (
+        response.status === 401 ||
+        response.status === 419 ||
+        (response.redirected && response.url.includes('/login'))
+      ) {
+        const message = t('checkout.payment_step.auth_required');
+        setStatus('error');
+        setMessage(message);
+        toast.error(message);
+        goToStep('auth');
+        return;
+      }
       if (typeof window !== 'undefined') {
          
         console.info('[Checkout] Hosted checkout response', { status: response.status, rawBody });