Laravel Token mismatch exception?

Question

Laravel

There is a page, the page has a lot of functionality through ajax. All post requests are checked against csrf. After a certain time, if you do not reload the page, Ajax requests stop working because the token has changed.
What to do in this case? Can I remove ajax requests from the check?

Answer 1

It's just that the lifetime of the token is set to 2 hours by default. You can see this in Illuminate\Foundation\Http\Middleware\VerifyCsrfToken in the addCookieToResponse method.

protected function addCookieToResponse($request, $response)
  {
    $response->headers->setCookie(
      new Cookie('XSRF-TOKEN', $request->session()->token(), time() + 60 * 120, '/', null, false, false)
    );

    return $response;
  }

You need to overload the method with your data in App\Http\Middleware\VerifyCsrfToken. Here is a working example, we take the time from the config (it is indicated there in minutes, as is customary in the Laravel config), converting it to seconds:

protected function addCookieToResponse($request, $response)
    {
        $response->headers->setCookie(
            new Cookie('XSRF-TOKEN', $request->session()->token(), time() + Config::get("session.lifetime")*60, '/', null, false, false)
        );
        return $response;
    }

Answer 2

You can also use this https://github.com/GeneaLabs/laravel-caffeine - sends requests every time the session time expires.