From 6f619a8184a119f22331711ce9b99248306714f5 Mon Sep 17 00:00:00 2001
From: Leon Morival <leon.morival@gmail.com>
Date: Fri, 22 May 2026 16:57:09 +0200
Subject: [PATCH] feat: clean sanctum

---
 bootstrap/app.php  |  1 -
 config/cors.php    |  4 ++--
 config/sanctum.php | 10 +++-------
 3 files changed, 5 insertions(+), 10 deletions(-)

diff --git a/bootstrap/app.php b/bootstrap/app.php
index 8ba1830..3f6f0ef 100644
--- a/bootstrap/app.php
+++ b/bootstrap/app.php
@@ -15,7 +15,6 @@ return Application::configure(basePath: dirname(__DIR__))
         health: '/up',
     )
     ->withMiddleware(function (Middleware $middleware): void {
-        $middleware->statefulApi();
         $middleware->prepend(\App\Http\Middleware\SetLocale::class);
         $middleware->alias([
             'verified' => \App\Http\Middleware\EnsureEmailIsVerified::class,
diff --git a/config/cors.php b/config/cors.php
index 131c333..58aa69d 100644
--- a/config/cors.php
+++ b/config/cors.php
@@ -15,7 +15,7 @@ return [
     |
     */
 
-    'paths' => ['api/*', 'sanctum/csrf-cookie'],
+    'paths' => ['api/*'],
 
     'allowed_methods' => ['*'],
 
@@ -29,6 +29,6 @@ return [
 
     'max_age' => 0,
 
-    'supports_credentials' => true,
+    'supports_credentials' => false,
 
 ];
diff --git a/config/sanctum.php b/config/sanctum.php
index 7e2e852..f381dca 100644
--- a/config/sanctum.php
+++ b/config/sanctum.php
@@ -1,7 +1,5 @@
 <?php
 
-use Laravel\Sanctum\Sanctum;
-
 return [
 
     /*
@@ -15,11 +13,9 @@ return [
     |
     */
 
-    'stateful' => explode(',', env('SANCTUM_STATEFUL_DOMAINS', sprintf(
-        '%s%s%s',
-        'localhost,localhost:3000,localhost:8081,localhost:8082,127.0.0.1,127.0.0.1:8000,127.0.0.1:8081,127.0.0.1:8082,::1',
-        Sanctum::currentApplicationUrlWithPort(),
-        Sanctum::currentRequestHost(),
+    'stateful' => array_values(array_filter(array_map(
+        'trim',
+        explode(',', env('SANCTUM_STATEFUL_DOMAINS', ''))
     ))),
 
     /*