tvvocold
tvvocold

Reputation: 69

Laravel 5.8 VerifyCsrfToken Exception not working

I'm trying to exclude all requests on an endpoint which I call test.com/code so I do like this in the VerifyCsrfToken.php file.

<?php

namespace App\Http\Middleware;

use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken as Middleware;

class VerifyCsrfToken extends Middleware
{
    /**
     * Indicates whether the XSRF-TOKEN cookie should be set on the response.
     *
     * @var bool
     */
    protected $addHttpCookie = true;

    /**
     * The URIs that should be excluded from CSRF verification.
     *
     * @var array
     */
    protected $except = [
        'code',
        'code/*'
    ];
}

But it does not solve the issue, even after I try to run "php artisan route:clear && php artisan config:clear", Anyone knows why I can't exclude specific routes? (Laravel 5.8)

My route is something like this:

Route::get('code/testing', 'CodeController@testing');

I have try this and it didn't work either.

protected $except = [
        'https://test.com/code/*',
    ];

Till now the only way I figure out is remove the line "\App\Http\Middleware\VerifyCsrfToken::class," from app/Http/Kernel.php to disable Csrf feature which is not a good solution.

Upvotes: 0

Views: 824

Answers (2)

STA
STA

Reputation: 34828

Use / (slash) at the beggining :

protected $except = [
        '/code/*'
    ];

Upvotes: 1

Rafik Farhad
Rafik Farhad

Reputation: 1202

You can try '/code/*'. It works for me with a slash / in the front of the url.

Upvotes: 0

Related Questions