except broadcasting/auth from csrf token

2026-02-14 10:42:30 +01:00
parent f32dee8e58
commit 3b304959a9
1 changed files with 3 additions and 0 deletions
@@ -14,6 +14,9 @@ return Application::configure(basePath: dirname(__DIR__))
    )
    ->withMiddleware(function (Middleware $middleware): void {
        $middleware->statefulApi();
+        $middleware->validateCsrfTokens(except: [
+            'broadcasting/auth',
+        ]);
    })
    ->withExceptions(function (Exceptions $exceptions): void {
        //