From 93d55765aee91010ef611ed5f420d9927d89e511 Mon Sep 17 00:00:00 2001
From: dhanabalan <dhana@example.com>
Date: Sat, 31 Jan 2026 17:59:00 +0530
Subject: [PATCH] Remove unused CSRF token in push notification registration
 script

---
 .../views/filament/pages/notification-settings.blade.php   | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/resources/views/filament/pages/notification-settings.blade.php b/resources/views/filament/pages/notification-settings.blade.php
index d3997f0..bcf3785 100644
--- a/resources/views/filament/pages/notification-settings.blade.php
+++ b/resources/views/filament/pages/notification-settings.blade.php
@@ -42,7 +42,7 @@
 
     <script>
         const vapidKey = "{{ config('webpush.vapid.public_key') }}";
-        const csrfToken = "{{ csrf_token() }}";
+        // const csrfToken = "{{ csrf_token() }}";
 
         async function registerPush() {
             if (!('serviceWorker' in navigator)) return;
@@ -57,15 +57,14 @@
                 applicationServerKey: vapidKey
             });
 
-            await fetch('/push/subscribe', {
+            await fetch('api/push/subscribe', {
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json',
-                    'X-CSRF-TOKEN': csrfToken
+                    // 'X-CSRF-TOKEN': csrfToken
                 },
                 body: JSON.stringify(subscription)
             });
-
             alert("Push notifications enabled ✅");
         }
     </script>