chore: rename CSRF middleware to PreventRequestForgery for Laravel 13

config/sets/laravel130.php

@@ -3,6 +3,7 @@
 declare(strict_types=1);
 
 use Rector\Config\RectorConfig;
+use Rector\Renaming\Rector\Name\RenameClassRector;
 use RectorLaravel\Rector\Class_\AppendsPropertyToAppendsAttributeRector;
 use RectorLaravel\Rector\Class_\BackoffPropertyToBackoffAttributeRector;
 use RectorLaravel\Rector\Class_\ConnectionPropertyToConnectionAttributeRector;
@@ -38,4 +39,10 @@
     $rectorConfig->rule(TouchesPropertyToTouchesAttributeRector::class);
     $rectorConfig->rule(TriesPropertyToTriesAttributeRector::class);
     $rectorConfig->rule(UniqueForPropertyToUniqueForAttributeRector::class);
+
+    // see https://laravel.com/docs/13.x/upgrade#request-forgery-protection
+    $rectorConfig->ruleWithConfiguration(RenameClassRector::class, [
+        'Illuminate\Foundation\Http\Middleware\VerifyCsrfToken' => 'Illuminate\Foundation\Http\Middleware\PreventRequestForgery',
+        'Illuminate\Foundation\Http\Middleware\ValidateCsrfToken' => 'Illuminate\Foundation\Http\Middleware\PreventRequestForgery',
+    ]);
 };

stubs/Illuminate/Foundation/Http/Middleware/PreventRequestForgery.php

@@ -0,0 +1,11 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Illuminate\Foundation\Http\Middleware;
+
+if (class_exists('Illuminate\Foundation\Http\Middleware\PreventRequestForgery')) {
+    return;
+}
+
+class PreventRequestForgery {}

stubs/Illuminate/Foundation/Http/Middleware/ValidateCsrfToken.php

@@ -0,0 +1,11 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Illuminate\Foundation\Http\Middleware;
+
+if (class_exists('Illuminate\Foundation\Http\Middleware\ValidateCsrfToken')) {
+    return;
+}
+
+class ValidateCsrfToken {}

stubs/Illuminate/Foundation/Http/Middleware/VerifyCsrfToken.php

@@ -0,0 +1,11 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Illuminate\Foundation\Http\Middleware;
+
+if (class_exists('Illuminate\Foundation\Http\Middleware\VerifyCsrfToken')) {
+    return;
+}
+
+class VerifyCsrfToken {}

tests/Sets/Laravel130/Fixture/validate_csrf_token_to_prevent_request_forgery.php.inc

@@ -0,0 +1,29 @@
+<?php
+
+namespace RectorLaravel\Tests\Sets\Laravel130\Fixture;
+
+Route::post('/bar', function () {})->withoutMiddleware([\Illuminate\Foundation\Http\Middleware\ValidateCsrfToken::class]);
+
+class CustomValidateCsrfMiddleware extends \Illuminate\Foundation\Http\Middleware\ValidateCsrfToken
+{
+    protected $except = [
+        'webhooks/*',
+    ];
+}
+
+?>
+-----
+<?php
+
+namespace RectorLaravel\Tests\Sets\Laravel130\Fixture;
+
+Route::post('/bar', function () {})->withoutMiddleware([\Illuminate\Foundation\Http\Middleware\PreventRequestForgery::class]);
+
+class CustomValidateCsrfMiddleware extends \Illuminate\Foundation\Http\Middleware\PreventRequestForgery
+{
+    protected $except = [
+        'webhooks/*',
+    ];
+}
+
+?>

tests/Sets/Laravel130/Fixture/verify_csrf_token_to_prevent_request_forgery.php.inc

@@ -0,0 +1,29 @@
+<?php
+
+namespace RectorLaravel\Tests\Sets\Laravel130\Fixture;
+
+Route::post('/foo', function () {})->withoutMiddleware([\Illuminate\Foundation\Http\Middleware\VerifyCsrfToken::class]);
+
+class CustomCsrfMiddleware extends \Illuminate\Foundation\Http\Middleware\VerifyCsrfToken
+{
+    protected $except = [
+        'stripe/*',
+    ];
+}
+
+?>
+-----
+<?php
+
+namespace RectorLaravel\Tests\Sets\Laravel130\Fixture;
+
+Route::post('/foo', function () {})->withoutMiddleware([\Illuminate\Foundation\Http\Middleware\PreventRequestForgery::class]);
+
+class CustomCsrfMiddleware extends \Illuminate\Foundation\Http\Middleware\PreventRequestForgery
+{
+    protected $except = [
+        'stripe/*',
+    ];
+}
+
+?>