From ca094cff9ffb5751901f57c3dde3aabbff1832c1 Mon Sep 17 00:00:00 2001
From: amirghasempoor <amirghasempoor79@gmail.com>
Date: Sun, 10 May 2026 14:25:12 +0330
Subject: [PATCH] prevent request forgery

---
 backend/Dockerfile        | 1 -
 backend/bootstrap/app.php | 2 +-
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/backend/Dockerfile b/backend/Dockerfile
index 3a24367a..6b930093 100644
--- a/backend/Dockerfile
+++ b/backend/Dockerfile
@@ -30,7 +30,6 @@ ENV COMPOSER_ALLOW_SUPERUSER=1
 # Default command
 CMD composer install ;\
     composer dump-autoload --optimize --classmap-authoritative ;\
-    php artisan key:generate ;\
     php artisan migrate ;\
     php artisan db:seed ;\
     php-fpm
diff --git a/backend/bootstrap/app.php b/backend/bootstrap/app.php
index 6de85c67..68a86469 100755
--- a/backend/bootstrap/app.php
+++ b/backend/bootstrap/app.php
@@ -12,7 +12,7 @@ return Application::configure(basePath: dirname(__DIR__))
         health: '/up',
     )
     ->withMiddleware(function (Middleware $middleware): void {
-        $middleware->web()->validateCsrfTokens(['*']);
+        $middleware->web()->preventRequestForgery(['*']);
     })
     ->withExceptions(function (Exceptions $exceptions): void {
         //