<?php

namespace App\Http\Middleware;

use Illuminate\Foundation\Http\Middleware\PreventRequestForgery as Middleware;

class VerifyCsrfToken extends Middleware
{
    /**
     * The URIs that should be excluded from CSRF verification.
     *
     * @var array<int, string>
     */
    protected $except = [
        'api/webhooks/slack',
        'api/webhooks/telegram/*',
        'email/campaign-webhook/*',
        // PRC-1059 — imzalı S2S gateway webhook'u (Conekta/BTCPay/CoinPayments/BitPay/
        // PayTR/iPay88); otantiklik modülün imza doğrulamasında, CSRF token'ı yok.
        'payment/webhook/*',
    ];
}
