From 3b304959a9421fcc34e4314ef50effe41a195052 Mon Sep 17 00:00:00 2001
From: Giovanni-Josserand <josserand.giovanni@gmail.com>
Date: Sat, 14 Feb 2026 10:42:30 +0100
Subject: [PATCH] except broadcasting/auth from csrf token

---
 bootstrap/app.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/bootstrap/app.php b/bootstrap/app.php
index 8ecbefe..ba9d524 100644
--- a/bootstrap/app.php
+++ b/bootstrap/app.php
@@ -14,6 +14,9 @@ return Application::configure(basePath: dirname(__DIR__))
     )
     ->withMiddleware(function (Middleware $middleware): void {
         $middleware->statefulApi();
+        $middleware->validateCsrfTokens(except: [
+            'broadcasting/auth',
+        ]);
     })
     ->withExceptions(function (Exceptions $exceptions): void {
         //