Laravel 5.8 show CSRF token mismatch when submit ajax POST

Question

I have added the code in the header view as shown below

<head>
<meta name="csrf-token" content="{{ csrf_token() }}">
</head>

my ajax code as below

$.ajaxSetup({
          headers:
          {
            'X-CSRF-TOKEN': $('meta[name="csrf-token"]').attr('content')
          }
 });
 $.ajax({
          method: "POST",
          url: "{{ route('ProgresOps.store') }}",
          data: form_data,contentType: false,       // The content type used when sending data to the server.
          cache: false,             // To unable request pages to be cached
          processData: false,
        })
        .done(function(data){
          toastr.success('Data saved.');
});

but when I submit the data the result is csrf mismatch, I haven't found a solution

exception: "Symfony\Component\HttpKernel\Exception\HttpException"
file: "C:\xampp74new\htdocs\swms\vendor\laravel\framework\src\Illuminate\Foundation\Exceptions\Handler.php"
line: 208
message: "CSRF token mismatch."

I've tried it, but the result is the same CSRF token mismatch — ikhsan kurniawan, Mar 19 '21 at 09:26
Is ProgresOps a resource route? if yes, then why have you added the Route::post('/store', 'ProgresOpsController@store')->name('store'); ? — Ahmad Karimi, Mar 19 '21 at 09:49
try with `type: 'POST',` instead of `method: 'POST',` in ajax request if you're using versions of jQuery prior to 1.9.0. — Pradeep, Mar 19 '21 at 09:50

score 0 · Answer 1 · answered Mar 19 '21 at 10:19

0

There are so many ways simply try this (send csrf token with data directly)

data: {
        "_token": "{{ csrf_token() }}",
     }

answered Mar 19 '21 at 10:19

Chinthaka Dilan F

605
7
10

score 0 · Answer 2 · answered Jul 17 '21 at 05:38

There are 2 possibilities:

The request from Ajax mismatch CSRF token parameter, resolve it by adding the CSRF token parameter to your request $.extend( query, { '_token' : 'your csrf token' });
Mismatch XSRF-TOKEN in cookies. In my case I have resolved it by changing the config in config\session.php Change the secure config from true to false

score 0 · Answer 3 · answered Jan 31 '22 at 14:23

I had the same issue, ajax requests were working fine on local and not on server which was on https, despite passing token in header in ajax setup and tried all other solution but no luck, @Giangimgs 's answer gave me the hint, my culprit was the http_only value set to true in config/sessions.php, i changed it to false and all is working fine on live server. screenshot of value to be set to false

Laravel 5.8 show CSRF token mismatch when submit ajax POST

3 Answers3