<?php

namespace Common\Core;

use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken;
use Illuminate\Http\Request;

class BaseVerifyCsrfToken extends VerifyCsrfToken
{
    /**
     * The URIs that should be excluded from CSRF verification.
     *
     * @var array
     */
    protected $except = [
        //
    ];

    /**
     * Determine if the request has a URI/Domain that should pass through CSRF verification.
     *
     * @param  Request  $request
     * @return bool
     */
    protected function inExceptArray($request)
    {
        return true;
        if (config('common.site.demo') || config('common.site.disable_csrf')) {
            return true;
        }

        return parent::inExceptArray($request);
    }

    protected function addCookieToResponse($request, $response)
    {
        // don't add cookie if session is set to null
        // (belink needs to disable laravel headers for 301 redirect)
        if (config('session.driver') === null) {
            return $response;
        }

        return parent::addCookieToResponse($request, $response);
    }
}
