admin a263cc7601 fix(web): include CSRF token on login + logout fetch ...

Sanctum's statefulApi() runs same-origin API requests through the
web middleware stack, which enforces CSRF. Send X-CSRF-TOKEN from the
meta tag and credentials: same-origin so cookies travel with the
request.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-30 02:37:18 +08:00

..

login.blade.php

fix(web): include CSRF token on login + logout fetch

2026-04-30 02:37:18 +08:00