How to solve Laravel not generating CSRF token

Question

Okay, so I've been using jQuery to connect to a controller function that authenticates data and submits it via AJAX using this code. This was working flawlessly until I took a day off on Saturday. Coming back to the project yesterday I keep encountering this error with HTTP code 419

"message": "CSRF token mismatch.",
"exception": "Symfony\\Component\\HttpKernel\\Exception\\HttpException",
"file": "C:\\workspace\\app_name\\vendor\\laravel\\framework\\src\\Illuminate\\Foundation\\Exceptions\\Handler.php",
"line": 387,

So I tried to echo the CSRF token and it's blank! Keep in mind it was working perfectly Friday then come Sunday (yesterday), with no external input, it just randomly hits me with this. What could be the reason for it not generating a token?

HTTP code 419 is Used by the Laravel Framework when a CSRF Token is missing or expired. — Indra Kumar S
– Indra Kumar S, Commented Jun 7, 2021 at 3:21
First of all, thank you for taking the time. If a token expires how can I regenerate it? — DerickMasai
– DerickMasai, Commented Jun 7, 2021 at 3:27
Hello John, this is used to generate the APP_KEY on the .env file right? I still tried it, didn't work sadly. — DerickMasai
– DerickMasai, Commented Jun 7, 2021 at 3:40
okay.once you try with different browser or clearing browser cache .also try php artisan view:clear php artisan config:clear — John Lobo
– John Lobo, Commented Jun 7, 2021 at 3:59

DerickMasai · Accepted Answer · 2021-06-07 04:24:47Z

Okay, so I simply added this code quickly to my code just before the workday ended so didn't have time to test hence failed to notice the error.

$request->session()->flush();

This line of code is responsible for clearing sessions. What it DOESN'T mention in the Laravel docs though is that since CSRF tokens are sessions AS WELL, using this basically makes IO to your databases impossible since it clears ALL sessions including said tokens. So until this is resolved (ideally with a code snippet that clears dev-created sessions while sparing inbuilt Laravel ones), avoid using this line of code. Instead, use this to clear single sessions:

// Forget a single key...
$request->session()->forget('name');

Or this to clear multiple sessions

// Forget multiple keys...
$request->session()->forget(['name', 'status']);

You can also learn more about this beautiful framework's sessions here.

Lastly, thank you to @Indra Kumar S, @John Lobo, @Manjeet and @Paras Raiyani for taking the time to browse the platform and to offer assistance to others. Will definitely be doing the same.

mk23 · Accepted Answer · 2021-06-07 04:07:21Z

1

Run below commands :

php artisan key:generate

and then clear cache

php artisan cache:clear

If you want to see if the token value is changing then try below code

Route::get('/token', function (Request $request) {
    $token = $request->session()->token();
    echo $token;
    $token = csrf_token();
    echo $token;

});

answered Jun 7, 2021 at 4:07

mk23

1,4131 gold badge14 silver badges27 bronze badges

2 Comments

DerickMasai Over a year ago

Thank you very much for the suggestion @Manjeet. I just found the solution and it was a result of my ignorance 😅.

mk23 Over a year ago

Glad you found the solution :)

Collectives™ on Stack Overflow

How to solve Laravel not generating CSRF token

2 Answers 2

Comments

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related