Laravel 5, ajax, 500 Internal Server Error, TokenMismatchException in VerifyCsrfToken.php line 46:

Question

I'm using Laravel 5 with ajax post in a popup alert, and it giving me the error "500 Internal Server Error", when I checked firebug, I find that ajax return an error page saying "TokenMismatchException in VerifyCsrfToken.php line 46:"

when I comment App\Http\Middleware\VerifyCsrfToken, it works fine, but I assume that it's not recommended, I print the _token variable and it's not empty
the ajax post code is:

 $('#demo_4').click(function(){
        bootbox.prompt("What is your name?", function(result) {
            if (result === null) {
                alert("Prompt dismissed");
            } else {
                // alert("Hi <b>"+result+"</b>");
                $.ajax({
                    url: 'test',
                    type: "post",
                    data: {'name':result, '_token': $('input[name=_token]').val()},
                    success: function(data){
                        alert(data);
                    }
                });
            }
        });
    });

the Route code is:

Route::post('test', 'AccountController@login');

the AccountController code is:

<?php
namespace App\Http\Controllers;
use Input;
use Request;
use App\Http\Controllers;

class AccountController extends Controller 
{

    public function login()
    {

        if (Request::ajax()) {
            $data = Input::all();
            print_r($data);
            die;
        }

    }
}

return the token from the server as ajax response. most probably, the token you are sending and the token in the server doesn't match. i have seen it happening in specially ajax request in laravel 5. — itachi, May 26 '15 at 14:47

Nikolaj Sarry · Answer 1 · 2015-05-26T18:13:34.697

You need to insert this line to your form

<input type="hidden" name="_token" value="<?php echo csrf_token(); ?>">

Or adding this to controller

use Illuminate\Support\Facades\Session

Please enable debugger and provide what Laravel5 debugger shows to speak more detail.

In ajax call add this to data option:

'_token':$('input[name=_token]').val()

Or in globally way add

<meta name="_token" content="{!! csrf_token() !!}"/>

And add to footer:

<script type="text/javascript">
    $.ajaxSetup({
        headers: { 'X-CSRF-Token' : $('meta[name=_token]').attr('content') }
    });
</script>

UPD: to controller

use Input;
use Request;
class AccountController extends Controller {
    public function login() 
    {
    // Getting all post data
    if(Request::ajax()) {
        $data = Input::all();
        print_r($data);die;
    }
}

UPD2: try to add this to your main layout

<meta name="_token" content="{!! csrf_token() !!}"/>

<script type="text/javascript">
    $.ajaxSetup({
        headers: { 'X-CSRF-Token' : $('meta[name=_token]').attr('content') }
    });
</script>

Check that your web server has already write access to session directory, it can be app/storage/framework/sessions/. Execute

rm -f {your_web_app}/storage/framework/sessions/*

Reload web server.

In some cases check app/Http/Middleware/VerifyCsrfToken.php for tokensMatch method with this code:

$token = $request->ajax() ? $request->header('X-CSRF-Token') : $request->input('_token');

return $request->session()->token() == $token;

And check javascript file for this:

// CSRF protection
$.ajaxSetup(
{
    headers:
    {
        'X-CSRF-Token': $('input[name="_token"]').val()
    }
});

I already added it, the same result, when I comment the 'App\Http\Middleware\VerifyCsrfToken in Kernel.php, it works properly, and I get the value of the _token — MedYasser.alkahf, May 26 '15 at 15:22
but it's not recommended to comment it, so is there any other solution ? — MedYasser.alkahf, May 26 '15 at 15:35
check UPD2 steps, is it helpful? and check is laravel installation path same in `sessions.php` config file — Nikolaj Sarry, May 26 '15 at 18:14

score 0 · Answer 2 · answered Apr 19 '17 at 10:05

0

I have also faced similar problem

Replace data: {'name':result, '_token': $('input[name=_token]').val()}, with data: {'name':result, '_token': "$('input[name=_token]').val()"},

Placing double quotes around token solved my problem.

answered Apr 19 '17 at 10:05

RAJESHINDIN

171
1
3
16

Laravel 5, ajax, 500 Internal Server Error, TokenMismatchException in VerifyCsrfToken.php line 46:

2 Answers2

Linked