From 4577f67d0a895487ff5fbbd7bf6884dafde57efe Mon Sep 17 00:00:00 2001
From: dhanabalan <dhana@example.com>
Date: Sat, 31 Jan 2026 18:04:26 +0530
Subject: [PATCH 1/2] Fix CSRF token handling and update fetch URL for push
 subscription

---
 .../views/filament/pages/notification-settings.blade.php    | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/resources/views/filament/pages/notification-settings.blade.php b/resources/views/filament/pages/notification-settings.blade.php
index f14b5a7..8d2fde0 100644
--- a/resources/views/filament/pages/notification-settings.blade.php
+++ b/resources/views/filament/pages/notification-settings.blade.php
@@ -42,7 +42,7 @@
 
     <script>
         const vapidKey = "{{ config('webpush.vapid.public_key') }}";
-        // const csrfToken = "{{ csrf_token() }}";
+        const csrfToken = "{{ csrf_token() }}";
 
         async function registerPush() {
             if (!('serviceWorker' in navigator)) return;
@@ -57,11 +57,11 @@
                 applicationServerKey: vapidKey
             });
 
-            await fetch('/api/push/subscribe', {
+            await fetch('/push/subscribe', {
                 method: 'POST',
                 headers: {
                     'Content-Type': 'application/json',
-                    // 'X-CSRF-TOKEN': csrfToken
+                    'X-CSRF-TOKEN': csrfToken
                 },
                 body: JSON.stringify(subscription)
             });

From 4a796a670a471f228fe8459cabbe546d35d901b2 Mon Sep 17 00:00:00 2001
From: dhanabalan <dhana@example.com>
Date: Sat, 31 Jan 2026 18:05:10 +0530
Subject: [PATCH 2/2] Refactor WebPushSubscription logic to streamline
 subscription creation

---
 routes/web.php | 34 +++++++++++++++++-----------------
 1 file changed, 17 insertions(+), 17 deletions(-)

diff --git a/routes/web.php b/routes/web.php
index 83ff819..842d85f 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -58,30 +58,30 @@ use App\Http\Livewire\CustomLogin;
         'keys.auth' => 'required|string',
     ]);
 
-    // WebPushSubscription::updateOrCreate(
-    //     ['endpoint' => $request->endpoint],
-    //     [
-    //         'subscribable_type' => get_class($user),
-    //         'subscribable_id'   => $user->id,
-    //         'public_key'        => $request->keys['p256dh'],
-    //         'auth_token'        => $request->keys['auth'],
-    //         'content_encoding'  => $request->contentEncoding ?? 'aesgcm',
-    //     ]
-    // );
-
     WebPushSubscription::updateOrCreate(
+        ['endpoint' => $request->endpoint],
         [
-            'endpoint'          => $request->endpoint,
             'subscribable_type' => get_class($user),
             'subscribable_id'   => $user->id,
-        ],
-        [
-            'public_key'       => $request->keys['p256dh'],
-            'auth_token'       => $request->keys['auth'],
-            'content_encoding' => $request->contentEncoding ?? 'aesgcm',
+            'public_key'        => $request->keys['p256dh'],
+            'auth_token'        => $request->keys['auth'],
+            'content_encoding'  => $request->contentEncoding ?? 'aesgcm',
         ]
     );
 
+    // WebPushSubscription::updateOrCreate(
+    //     [
+    //         'endpoint'          => $request->endpoint,
+    //         'subscribable_type' => get_class($user),
+    //         'subscribable_id'   => $user->id,
+    //     ],
+    //     [
+    //         'public_key'       => $request->keys['p256dh'],
+    //         'auth_token'       => $request->keys['auth'],
+    //         'content_encoding' => $request->contentEncoding ?? 'aesgcm',
+    //     ]
+    // );
+
 
     return response()->json(['success' => true]);
 });