diff --git a/routes/actions.php b/routes/actions.php
index d1367af..091e2c1 100644
--- a/routes/actions.php
+++ b/routes/actions.php
@@ -28,7 +28,12 @@
         Route::get('oauth-redirect', fn () => redirect()->route('statamic.cp.shopify.index'));
 
         Route::prefix('webhook')
-            ->withoutMiddleware(['App\Http\Middleware\VerifyCsrfToken', 'Illuminate\Foundation\Http\Middleware\VerifyCsrfToken'])
+            ->withoutMiddleware([
+                'App\Http\Middleware\VerifyCsrfToken',
+                'Illuminate\Foundation\Http\Middleware\VerifyCsrfToken',
+                'Illuminate\Foundation\Http\Middleware\ValidateCsrfToken',
+                'Illuminate\Foundation\Http\Middleware\PreventRequestForgery',
+            ])
             ->middleware([VerifyShopifyHeaders::class])
             ->group(function () {
                 Route::post('collection/create', [Webhooks\CollectionCreateUpdateController::class, 'create'])