<?php

namespace App\Http\Middleware;

use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken as BaseVerifier;

class VerifyCsrfToken extends BaseVerifier
{
    /**
     * The URIs that should be excluded from CSRF verification.
     *
     * @var array
     */
    protected $except = [
        // OAuth & Authentication callbacks (external services)
        'auth/*/callback',
        '*/auth/*/callback', 
        'stripe/webhook',
        'paypal/webhook',
        'payu/webhook',
        'payment/*/webhook',
        'social/*/callback',
        'oauth/*/callback',
        'api/*',
        'webhooks/*',
        // Login endpoints for app/mobile authentication (API-style)
        'loginToWeb',
        'webLoginFromApp',
		'user/update',
		'messages/send',
		'messages/startZoomMeeting',
		'messages/more',
		'user/logoutcookie',
		'messages/usertyping',
		'messages/send_from_hold',
		'account/userorganization'
		/*'login',
		'loginpost',*/
        // Public forms that need to work without session        
    ];
}