use Illuminate\Foundation\Configuration\Middleware;

// ...

->withMiddleware(function (Middleware $middleware) {
    $middleware->validateCsrfTokens(except: [
        'pago/webpay/return',
        'pago/webpay/return/*',

        'khipu/webhook',
        'khipu/webhook/*',

        // Flow
        'pago/flow/confirmacion',
        'pago/flow/confirmacion/*',
        'pago/flow/return',
        'pago/flow/return/*',
    ]);
})