Exclude certain routes from csrf protection

2024-03-23 14:18:02 +00:00 · 2024-03-23 14:18:02 +00:00 · e95186e1fd
commit e95186e1fd
parent 03b8c1677c
1 changed files with 7 additions and 0 deletions
--- a/bootstrap/app.php
+++ b/bootstrap/app.php
@ -12,6 +12,13 @@ return Application::configure(basePath: dirname(__DIR__))
        health: '/up',
    )
    ->withMiddleware(function (Middleware $middleware) {
+        $middleware->validateCsrfTokens(except: [
+            'api/token',
+            'api/post',
+            'api/media',
+            'micropub/places',
+            'webmention',
+        ]);
        $middleware->append(CSPHeader::class);
    })
    ->withExceptions(function (Exceptions $exceptions) {