From 3da95da099cf89161f4aaecdc62a4ae173167b43 Mon Sep 17 00:00:00 2001
From: F4ilji <F4ilj@yandex.ru>
Date: Thu, 2 Jul 2026 01:36:05 +0500
Subject: [PATCH] fix: use X-CSRF-TOKEN header to match Main.vue pattern

X-XSRF-TOKEN is for Laravel's cookie-based CSRF verification,
but this app uses meta tag CSRF. Main.vue uses X-CSRF-TOKEN
and works correctly.
---
 resources/js/Pages/Dashboard/Deploy/Index.vue | 9 ++-------
 1 file changed, 2 insertions(+), 7 deletions(-)

diff --git a/resources/js/Pages/Dashboard/Deploy/Index.vue b/resources/js/Pages/Dashboard/Deploy/Index.vue
index bdee50a..d8b600a 100644
--- a/resources/js/Pages/Dashboard/Deploy/Index.vue
+++ b/resources/js/Pages/Dashboard/Deploy/Index.vue
@@ -50,10 +50,8 @@ async function startDeploy() {
   try {
     const response = await fetch(route('dashboard.deploy'), {
       method: 'POST',
-      credentials: 'same-origin',
       headers: {
-        'Content-Type': 'application/json',
-        'X-XSRF-TOKEN': document.querySelector('meta[name="csrf-token"]')?.getAttribute('content') || '',
+        'X-CSRF-TOKEN': document.querySelector('meta[name="csrf-token"]').content,
         'Accept': 'application/json',
       },
     })
@@ -80,14 +78,12 @@ function startPolling() {
   pollInterval = setInterval(async () => {
     try {
       const statusRes = await fetch(route('dashboard.deploy.status'), {
-        credentials: 'same-origin',
         headers: { 'Accept': 'application/json' },
       })
       const statusData = await statusRes.json()
       deployStatus.value = statusData
 
       const logRes = await fetch(route('dashboard.deploy.log') + '?lines=100', {
-        credentials: 'same-origin',
         headers: { 'Accept': 'application/json' },
       })
       const logData = await logRes.json()
@@ -116,9 +112,8 @@ async function clearLog() {
   try {
     await fetch(route('dashboard.deploy.clear'), {
       method: 'POST',
-      credentials: 'same-origin',
       headers: {
-        'X-XSRF-TOKEN': document.querySelector('meta[name="csrf-token"]')?.getAttribute('content') || '',
+        'X-CSRF-TOKEN': document.querySelector('meta[name="csrf-token"]').content,
         'Accept': 'application/json',
       },
     })