How to handle 419 page expired in Laravel?

Hello Artisans,

This post goes into detailes on How to handle 419 page expired in Laravel? We will see different ways to use csrf protection in laravel. You will get step by step guide to use csrf token in laravel application. You must add csrf token in your POST, DELETE, PUT, PATCH requests in laravel application.

So, let's get started. 

Using in Form

If you are getting a page expired 419 error you need to add csrf token in your form by adding following code. Basically, this code will create a hidden input with the value of csrf token. 

<form method="POST" action="">
    @csrf
    .....
</form>

Read also: How to detect language from string in Laravel?

Using in Ajax Request

If you are sending an ajax request in laravel and getting csrf token mismatch error then you can resolve this by just adding these following codes. First add this following meta tag in head tag. 

<meta name="csrf-token" content="{{ csrf_token() }}">

After that add this following source code in your script tag:

$.ajaxSetup({
    headers: {
        'X-CSRF-TOKEN': $('meta[name="csrf-token"]').attr('content')
    }
});

$.ajax({
   type: "POST",
   data: {"_token": "{{ csrf_token() }}","id": id},
   url: "https://domain_name/api/test-url",
   success: function(data){
     // do whatever you want with the results 
   }
});

Disabling CSRF Protection

You can disable CSRF Protection from any of your route by adding this following code in your app/Http/Middleware/VerifyCsrfToken.php file.

<?php

namespace App\Http\Middleware;

use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken as Middleware;

class VerifyCsrfToken extends Middleware
{
    /**
     * The URIs that should be excluded from CSRF verification.
     *
     * @var array
     */
    protected $except = [
        '/any-url'
    ];
}

Now it will not showing any csrf error on this route. 

Hope it will help you. 

Happy Coding :)