csrf token automatically regenerate on each request in laravel which cause csrf token mismatch on production server

Question

Csrf token automatically regenerate on each request in Laravel which cause csrf token mismatch on production server. On local server it is working fine I also print both token on verifiedCSRFToken.php file on product server

 $token = $this->getTokenFromRequest($request);
             echo $request->session()->token();
             echo "====";
             echo $token;
             die('Hi');

$token remain same but $request->session()->token() always changing on product server

this will always change because it added security in laravel — Kamlesh Paul, Jan 02 '20 at 07:08
but ajax not working due to this security and showing CSRF token mismatch every time. — Vishal Dhiman, Jan 02 '20 at 09:18
u should check this https://stackoverflow.com/questions/32738763/laravel-csrf-token-mismatch-for-ajax-post-request — Kamlesh Paul, Jan 02 '20 at 09:20
Dear everything working fine on local machine. even i already set "_token": "{{ csrf_token() }} and also in ajax header but still same error. — Vishal Dhiman, Jan 02 '20 at 09:43

score 4 · Accepted Answer · answered Jan 03 '20 at 10:46

4

_________(space before php tag in your routing file or any other file of laravel will cause unexpected issue on laravel )

answered Jan 03 '20 at 10:46

Vishal Dhiman

51
7

Muhammad Faran Ali · Answer 2 · 2020-01-02T07:30:33.237

0

I had this same problem and what i did was:

First in your .env file remove:set session driver like: SESSION_DRIVER=file (if your want it to save to a file)

then do: php artisan cache:clear then php artisan config:clear

that worked for me.

and forget to checkout application mode from .env

edited Jan 02 '20 at 07:30

answered Jan 02 '20 at 07:23

Muhammad Faran Ali

499
2
9

we already try this process but still showing the same error. – Vishal Dhiman Jan 02 '20 at 09:22
actually XSRF-TOKEN cookie not generating on server – Vishal Dhiman Jan 02 '20 at 10:13

score 0 · Answer 3 · answered Jan 02 '20 at 13:19

0

If you are sending many ajax requests within one page, I may suggest you use the token this way <meta name="csrf-token" content="{!! csrf_token() !!}">. And get it with '_token': $('meta[name="csrf-token"]').attr('content'),

answered Jan 02 '20 at 13:19

Nguyễn Sơn

13
2

Dear issue is something else everything working on local server on local server cookies are generated by laravel but on production server it is not generating cookies. That is the reason it is showing csrf token mismatch. due to this laravel generating new csrf token everytime in session. – Vishal Dhiman Jan 02 '20 at 13:28

csrf token automatically regenerate on each request in laravel which cause csrf token mismatch on production server

3 Answers3