解决 Laravel Webhook 未触发问题：正确配置 CSRF 保护豁免

public function order()
{
    $user = Auth::user();
    $payment = Mollie::api()->payments()->create([
        'amount' => [
            'currency' => 'EUR',
            'value' => number_format($this->service->price, 2, '.', '')
        ],
        'description' => 'Order #' . Str::random(6),
        'redirectUrl' => route('service.order.callback'),
        'webhookUrl' => route('service.order.webhook'), // 确保此路由名称与实际定义匹配
        'metadata' => [
            'user' => [
                'id' => $user->id,
                'name' => $user->name,
            ],
            'invoice' => [
                'id' => 0
            ]
        ]
    ]);

    return $this->redirect($payment->getCheckoutUrl(), 303);
}

// routes/web.php
Route::post('/service/order/webhook', [\App\Http\Controllers\Payment\InvoiceController::class, 'webhook'])->name('service.order.webhook');

namespace App\Http\Controllers\Payment;

use Illuminate\Http\Request;
use App\Models\Payment\Invoice;
use Carbon\Carbon;
use Illuminate\Routing\Controller; // 确保引入 Controller

class InvoiceController extends Controller
{
    public function webhook(Request $request)
    {
        // 建议：首先记录收到的所有请求数据，方便调试
        \Log::info('Mollie Webhook received:', $request->all());

        // 实际应用中，您应该验证 Webhook 请求的签名，以确保其来自 Mollie
        // 例如：https://docs.mollie.com/reference/webhooks/verify-webhook-requests

        $paymentId = $request->input('id'); // Mollie Webhook 通常会发送一个 payment ID
        if (!$paymentId) {
            \Log::warning('Mollie Webhook: No payment ID found in request.');
            return response('Bad Request', 400);
        }

        try {
            // 通过 Mollie API 获取最新的支付状态
            $payment = Mollie::api()->payments()->get($paymentId);

            if ($payment->isPaid() && !$payment->hasRefunds() && !$payment->isChargeback()) {
                // 支付成功逻辑
                // 查找或创建发票，更新订单状态等
                $invoice = Invoice::firstOrCreate(
                    ['payment_id' => $paymentId], // 假设 payment_id 是唯一的
                    [
                        'status' => 'paid',
                        'number' => 'INV-' . Str::random(8), // 生成一个唯一的发票号
                        'date' => Carbon::now(),
                        'billing_detail_id' => $payment->metadata->user->id ?? 1, // 从 metadata 获取用户ID
                        // 其他相关字段
                    ]
                );
                // 更新现有发票状态
                if ($invoice->wasRecentlyCreated === false && $invoice->status !== 'paid') {
                    $invoice->update(['status' => 'paid']);
                }
                \Log::info("Payment {$paymentId} successfully processed. Invoice ID: {$invoice->id}");

            } elseif ($payment->isFailed() || $payment->isCanceled()) {
                // 支付失败或取消逻辑
                \Log::warning("Payment {$paymentId} failed or cancelled. Status: {$payment->status}");
                // 更新相关订单或发票状态
            }
            // 其他状态处理...

        } catch (\Mollie\Api\Exceptions\ApiException $e) {
            \Log::error("Mollie API Error for payment {$paymentId}: " . $e->getMessage());
            return response('Internal Server Error', 500);
        } catch (\Exception $e) {
            \Log::error("Webhook processing error for payment {$paymentId}: " . $e->getMessage());
            return response('Internal Server Error', 500);
        }

        // 必须返回 200 OK 响应，告知 Mollie 您的应用已成功接收并处理了 Webhook
        return response('OK', 200);
    }
}

namespace App\Http\Middleware;

use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken as Middleware;

class VerifyCsrfToken extends Middleware
{
    /**
     * The URIs that should be excluded from CSRF verification.
     *
     * @var array<int, string>
     */
    protected $except = [
        // 添加您的 Mollie Webhook 路由到此数组
        '/service/order/webhook',
        // 如果有其他外部服务需要调用您的 POST 路由，也应在此处添加
    ];
}