ilycats/bootstrap/app.php

<?php

use Illuminate\Foundation\Application;
use Illuminate\Foundation\Configuration\Exceptions;
use Illuminate\Foundation\Configuration\Middleware;
use App\Http\Middleware\AdminMiddleware;
use App\Http\Middleware\AuthenticateApiToken;
use App\Http\Middleware\EnsureUserIsActive;

return Application::configure(basePath: dirname(__DIR__))
    ->withRouting(
        web: __DIR__.'/../routes/web.php',
        api: __DIR__.'/../routes/api.php',
        commands: __DIR__.'/../routes/console.php',
        health: '/up',
    )
    ->withMiddleware(function (Middleware $middleware) {
        
        // 1. Mendaftarkan alias middleware
        $middleware->alias([
            'admin' => AdminMiddleware::class,
            'mobile.token' => AuthenticateApiToken::class,
            'active.user' => EnsureUserIsActive::class,
        ]);

        // 2. Mengarahkan Tamu ke halaman login
        $middleware->redirectGuestsTo(fn () => route('login'));

        // 3. Mengarahkan User login ke Dashboard
        $middleware->redirectUsersTo(fn () => route('dashboard'));

        // 4. FIX HTTPS & PROXY (Sangat penting untuk Hostinger agar tidak 500/Loop)
        $middleware->trustProxies(at: '*');

        // 5. PENGECEK CSRF (Buka ini jika masih error 419 saat pendaftaran biometrik)
        $middleware->validateCsrfTokens(except: [
            'webauthn/*',
        ]);

    })
    ->withExceptions(function (Exceptions $exceptions) {
        //
    })->create();