The default route in web.php
Route::get('/', function () {
return view('welcome');
});
It comes with cookies and csrf by default, but I don't need that since I'm going to do the front with React. How should I do it, should I copy this path to api.php?
In your App\Http\Kernel.php comment out the Csrf middleware line.
Regarding cookies, you should consider first if you really do not require them to support your user authentication method. Cookies are not fought with the React application. In fact, in many cases they facilitate authentication.
But really that's a whole other topic, for a different question once you've considered how you're going to protect the information your routes give access to.