initial commit

bootstrap/app.php

@@ -3,28 +3,39 @@
 use Illuminate\Foundation\Application;
 use Illuminate\Foundation\Configuration\Exceptions;
 use Illuminate\Foundation\Configuration\Middleware;
-use App\Http\Middleware\AdminMiddleware; 
+use App\Http\Middleware\AdminMiddleware;
+use App\Http\Middleware\AuthenticateApiToken;
 
 return Application::configure(basePath: dirname(__DIR__))
     ->withRouting(
         web: __DIR__.'/../routes/web.php',
+        api: __DIR__.'/../routes/api.php',
         commands: __DIR__.'/../routes/console.php',
         health: '/up',
     )
-    ->withMiddleware(function (Middleware $middleware): void {
+    ->withMiddleware(function (Middleware $middleware) {
         
-        // 1. Mendaftarkan alias middleware (Existing & Optimized)
+        // 1. Mendaftarkan alias middleware
         $middleware->alias([
             'admin' => AdminMiddleware::class,
+            'mobile.token' => AuthenticateApiToken::class,
         ]);
 
-        // 2. Mengarahkan Tamu (Guest) secara global ke halaman login jika mencoba akses rute terproteksi
+        // 2. Mengarahkan Tamu ke halaman login
         $middleware->redirectGuestsTo(fn () => route('login'));
 
-        // 3. Mengarahkan User yang sudah login ke Dashboard jika mencoba mengakses halaman login kembali
+        // 3. Mengarahkan User login ke Dashboard
         $middleware->redirectUsersTo(fn () => route('dashboard'));
 
+        // 4. FIX HTTPS & PROXY (Sangat penting untuk Hostinger agar tidak 500/Loop)
+        $middleware->trustProxies(at: '*');
+
+        // 5. PENGECEK CSRF (Buka ini jika masih error 419 saat pendaftaran biometrik)
+        $middleware->validateCsrfTokens(except: [
+            'webauthn/*',
+        ]);
+
     })
-    ->withExceptions(function (Exceptions $exceptions): void {
-        // Di sini Anda bisa menambahkan penanganan error kustom jika diperlukan di masa depan
+    ->withExceptions(function (Exceptions $exceptions) {
+        //
     })->create();