From aa6f9b35d916838d5c33d3d3285229a925698074 Mon Sep 17 00:00:00 2001
From: Codex Agent <codex-agent@example.com>
Date: Mon, 22 Dec 2025 22:41:23 +0100
Subject: [PATCH] csrf fixes

---
 app/Http/Middleware/VerifyCsrfToken.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/Http/Middleware/VerifyCsrfToken.php b/app/Http/Middleware/VerifyCsrfToken.php
index d67b924..8098394 100644
--- a/app/Http/Middleware/VerifyCsrfToken.php
+++ b/app/Http/Middleware/VerifyCsrfToken.php
@@ -14,6 +14,6 @@ class VerifyCsrfToken extends Middleware
     protected $except = [
         'api/v1/photos/*/like',
         'api/v1/events/*/upload',
-        'paddle/webhook',
+        'paddle/webhook*',
     ];
 }