laravel - CSRF token always changes

Question

Well this is the problem I am facing from yesterday. It is always giving me TokenMismatchException and when I digged in and compared a few things, I found that on my local server, the _token field never changes. But on my production, it does. And that's the reason it kept giving me TokenMismatchException. Does anyone know how to fix this error.

I have

seen this question
Went through documentation.
Wrote several codeception tests.
<input id="token" type="hidden" value="{{ csrf_token() }}"> this already in my code.

[Here is the code](view-source:cornchat.ga/auth/register). Check line number 132. It's always changing. — Aditya Giri
– Aditya Giri, Commented May 28, 2015 at 7:04

Aditya Giri · Accepted Answer · 2015-05-28 07:25:35Z

7

Check if you have domain in the config/session.php setup to the right path. Even I had got the same problem. And resolved it just by changing that path.

edited May 28, 2015 at 7:25

Aditya Giri

1,83619 silver badges34 bronze badges

answered May 28, 2015 at 7:21

King User

1106 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Сергей Викторович · Accepted Answer · 2018-04-03 14:19:09Z

May be usefull.

Html:

<meta name="_token" content="{{ csrf_token() }}">

Js:

var network = {
    post: function(path, params, cb, type){
        $.ajax({
            url: path,
            type: 'post',
            data: params,
            headers: { "X-CSRF-TOKEN" : $('meta[name="_token"]').attr('content') },
            dataType: type,
            success: function (response, status) {
                if (status == "success") {
                    if (response.reason == "token_timeout") {
                        var new_token = response.new_token;
                        $('meta[name="_token"]').attr('content', new_token);
                        network.post(path, params, cb, type);
                    }else{
                        cb(response);
                    }
                }
            }
        });
    }
};

network.post('path to handler...', { key: value... }, function(response){
   if(response.status == 'success'){
       // to do
   }
}, "json");

/app/Exceptions/Handler.php:

    public function render($request, Exception $exception) {

        if ($exception instanceof \Illuminate\Session\TokenMismatchException) {
            return response()->json(['reason' => 'token_timeout', 'new_token' => csrf_token()], 200);
        }

        return parent::render($request, $exception);
    }

Collectives™ on Stack Overflow

laravel - CSRF token always changes

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related