diff --git a/bootstrap/app.php b/bootstrap/app.php
index 18d301a..f5973db 100644
--- a/bootstrap/app.php
+++ b/bootstrap/app.php
@@ -15,6 +15,9 @@ return Application::configure(basePath: dirname(__DIR__))
     )
     ->withMiddleware(function (Middleware $middleware) {
         $middleware->encryptCookies(except: ['appearance']);
+        $middleware->validateCsrfTokens(except: [
+            'provision-callback',
+        ]);
 
         $middleware->web(append: [
             HandleAppearance::class,