Restore VerifyCsrfToken middleware

Author: pascalbaljet

demo-app/package-lock.json

@@ -45,8 +45,13 @@ public function it_creates_new_request_with_original_properties()
     #[Test]
     public function it_preserves_request_data()
     {
+        session()->start();
+
         $originalRequest = Request::create(
-            '/users', 'POST', [], [], [], [], json_encode(['name' => 'new-role'])
+            '/users', 'POST', [], [], [], [], json_encode([
+                '_token' => session()->token(),
+                'name' => 'new-role',
+            ])
         );
         $originalRequest->headers->set('Content-Type', 'application/json');
 

demo-app/tests/Feature/DispatchBaseUrlRequestTest.php

@@ -1,7 +1,7 @@
 {
     "name": "@inertiaui/modal-react",
     "author": "Pascal Baljet <[email protected]>",
-    "version": "0.20.2",
+    "version": "0.20.3",
     "private": false,
     "license": "MIT",
     "type": "module",

react/package-lock.json

@@ -5,7 +5,6 @@
 namespace InertiaUI\Modal;
 
 use Illuminate\Cookie\Middleware\EncryptCookies;
-use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken;
 use Illuminate\Routing\Router;
 use Illuminate\Support\ServiceProvider;
 use Illuminate\Support\Str;
@@ -38,10 +37,8 @@ public function boot(): void
             }
         });
 
-        Modal::excludeMiddlewareOnBaseUrl([
-            EncryptCookies::class, // Prevent double encryption of cookies in subrequests
-            VerifyCsrfToken::class, // Don't validate CSRF tokens twice
-        ]);
+        // Prevent double encryption of cookies in subrequests
+        Modal::excludeMiddlewareOnBaseUrl(EncryptCookies::class);
 
         Router::macro('setCurrentRequest', function ($request): void {
             // @phpstan-ignore-next-line

react/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@inertiaui/modal-vue",
-    "version": "0.20.2",
+    "version": "0.20.3",
     "author": "Pascal Baljet <[email protected]>",
     "private": false,
     "license": "MIT",