diff --git a/bootstrap/app.php b/bootstrap/app.php index 0cd093a..a56f9f5 100644 --- a/bootstrap/app.php +++ b/bootstrap/app.php @@ -15,10 +15,11 @@ $middleware->web(append: [ \App\Http\Middleware\VulnerableHeadersMiddleware::class, ]); + $middleware->trustProxies(at: '*'); $middleware->validateCsrfTokens(except: [ 'csrf-target', // غیرفعال کردن CSRF برای این روت خاص ]); }) ->withExceptions(function (Exceptions $exceptions) { // - })->create(); \ No newline at end of file + })->create(); diff --git a/config/session.php b/config/session.php index c3494b5..12c31b3 100644 --- a/config/session.php +++ b/config/session.php @@ -199,7 +199,7 @@ | */ - 'same_site' => env('SESSION_SAME_SITE', 'lax'), + 'same_site' => env('SESSION_SAME_SITE', 'none'), /* |--------------------------------------------------------------------------