<?php

namespace App\Http\Middleware;

use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken as Middleware;

class VerifyCsrfToken extends Middleware
{
    /** Add any public JSON endpoints here */
    protected $except = [
        'pay/*/session',
        'pay/*/intent',
        'webhooks/*',
        'stripe/webhook',
        // legacy portal flows you already use:
        'p/pay/*/intent',
        'p/pay/*/setup',
        'p/pay/*/finalize',
    ];
}
