Disable csrf toke for some routes in laravel 5.4? Not working

Question

I am making an API for my website, API will be used to get, post, delete some data, but to post, csrf token is needed which cannot be generated from third party websites, so I have to disable csrf token for some routes. In documentation it says to add following in verifycsrftoken.php:

protected $except = [
    'leads',
    'leads/*'
];

But this is not working in laravel 5.4. Here is my sample route:

Route::post('leads/{id}', ['as'=>'leads']);

Any help would be appreciated.

That should work fine. You're still getting a CSRF exception? — ceejayoz, Oct 23 '17 at 12:53
That's probably a POST/GET mismatch. What does your form tag look like? — aynber, Oct 23 '17 at 12:55
@AhmadRza That is **not a CSRF issue.** It's a separate problem. — ceejayoz, Oct 23 '17 at 12:59
@ceejayoz this is not a duplicate of that question, their context and mine is totally different... — Ahmad Raza, Oct 23 '17 at 13:09
@AhmadRza It is the same issue. You are either POSTing to a GET route or GETting to a POST route. Check `php artisan route:list`. If you disagree, edit your question to add the `
` tag or code you're using to call the API and your `Route::get/post` definitions and I'll consider re-opening. — ceejayoz, Oct 23 '17 at 13:12

score 1 · Answer 1 · answered Oct 23 '17 at 12:58

1

The code you posted should work.

As you said in your comment, the error is MethodNotAllowedHttpException. That error in thrown when you try to visit a url with the wrong type. In order to send the form via POST, you will need to indicate in the form tag

<form method="POST" action="{{ url('leads/'.$lead->id) }}>

and also add the csrfToken inside the form

{!! csrf_field() !!}

answered Oct 23 '17 at 12:58

Lloople

1,827
1
17
31

command app/Http/kernal.php in \App\Http\Middleware\VerifyCsrfToken::class no need to use csrf token – Gowthaman D Oct 23 '17 at 13:05
Sorry but I said im calling api from third party website, third party website cannot generate csrf tokens for my main website, and Im calling api via ajax.. – Ahmad Raza Oct 23 '17 at 13:11
Make sure you're calling the API from POST instead of GET then. – Lloople Oct 23 '17 at 13:15
resolved, i was just checking whether its working or not just by typing in the url, it was not, but using ajax, it worked... – Ahmad Raza Oct 23 '17 at 13:27
1

Typing on the URL of your browser will do the request via GET. You can check POST routes using Postman. – Lloople Oct 23 '17 at 13:28

Disable csrf toke for some routes in laravel 5.4? Not working

1 Answers1