Confirm Checkout Session

Activate the account behind a completed Checkout Session.

The webhook is the authority on entitlement, but it is asynchronous — the customer lands on the success page before it has necessarily arrived. This endpoint does the same provisioning work synchronously and idempotently, so the customer can sign straight in instead of staring at a spinner. Whichever of the two runs second is a no-op.

Only a Checkout Session Stripe reports as paid can activate anything, so a guessed session id grants nothing.