ayrisdev/animexe
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(csrf): exclude tracking endpoints from csrf verification to prevent 419 errors

Browse Source
This commit is contained in:
Mustafa Yildiz
2026-08-21 18:48:53 +03:00
parent ee0fdd587c
commit 58422ff266
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bootstrap/app.php
+6 -2
View File
@@ -35,8 +35,12 @@ return Application::configure(basePath: dirname(__DIR__))
$middleware->web(\App\Http\Middleware\BotDetector::class); $middleware->web(\App\Http\Middleware\BotDetector::class);
// SEO yönlendirmeleri // SEO yönlendirmeleri
$middleware->web(\App\Http\Middleware\SeoRedirectMiddleware::class); $middleware->web(\App\Http\Middleware\SeoRedirectMiddleware::class);
// iyzico callback CSRF muaf // iyzico callback ve arka plan izleme metrikleri (beacon/fetch) CSRF muaf
$middleware->validateCsrfTokens(except: ['checkout/callback']); $middleware->validateCsrfTokens(except: [
'checkout/callback',
'track/*',
'api/*',
]);
}) })
->withExceptions(function (Exceptions $exceptions): void { ->withExceptions(function (Exceptions $exceptions): void {
// //