Laravel 5.5 AJAX 419 Error: How to Fix CSRF Token Issues?

Laravel 5.5 AJAX Call Returns Unknown Status 419: Resolving CSRF Token Issue

Question:

I'm performing an AJAX call in Laravel 5.5 but encounter a "419 (unknown status)" error. Despite having no forms on my page, I suspect the issue lies with the CSRF token. How can I resolve this?

Answer:

Client-Side:

In your HTML head section, insert the following:

<meta name="csrf-token" content="{{ csrf_token() }}">

This generates a unique CSRF token that the server will use to validate incoming requests.

AJAX Request:

Modify your AJAX request to include the CSRF token in the headers:

$.ajaxSetup({
  headers: {
    'X-CSRF-TOKEN': $('meta[name="csrf-token"]').attr('content')
  }
});

This ensures that the server can verify the origin of the request and prevent CSRF attacks.

Laravel Middleware (Optional):

Laravel automatically applies the CSRF middleware to protect POST requests. To disable this middleware for specific routes (e.g., the one handling your AJAX call), add the following lines to your AppHttpMiddlewareVerifyCsrfToken middleware:

/**
 * The URIs that should be excluded from CSRF verification.
 *
 * @var array
 */
protected $except = [
    '/fetch-company/*',
];

References:

• [Laravel CSRF Protection](https://laravel.com/docs/5.5/csrf)
• [CSRF Token for AJAX Requests](https://laravel.com/docs/5.5/csrf#csrf-token-for-ajax-requests)

The above is the detailed content of Laravel 5.5 AJAX 419 Error: How to Fix CSRF Token Issues?. For more information, please follow other related articles on the PHP Chinese website!