diff --git a/app/Http/Middleware/VerifyCsrfToken.php b/app/Http/Middleware/VerifyCsrfToken.php
index 83ec1171f8f..e19c39cae3c 100644
--- a/app/Http/Middleware/VerifyCsrfToken.php
+++ b/app/Http/Middleware/VerifyCsrfToken.php
@@ -26,6 +26,7 @@ class VerifyCsrfToken extends Middleware
 		'/api/Session::init',
 		'/api/v2/Zip',
 		'/api/v2/Shop/Checkout/Finalize/*',
+		'/api/v2/Photo::random',
 	];
 
 	/**