Fix Woo sync: exempt webhooks from CSRF and backfill on connect.

Auto-import catalog and orders after store activation, add manual order sync, and allow WooCommerce webhooks without CSRF tokens. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-07 00:15:37 +00:00
parent ec138a903f
commit e3ef23218f
9 changed files with 222 additions and 5 deletions
@@ -13,6 +13,10 @@ return Application::configure(basePath: dirname(__DIR__))
        health: '/up',
    )
    ->withMiddleware(function (Middleware $middleware): void {
+        $middleware->validateCsrfTokens(except: [
+            'webhooks/woocommerce/*',
+        ]);
+
        $middleware->redirectGuestsTo(fn (Request $request) => route('sso.connect', [
            'redirect' => $request->fullUrl(),
        ]));