Get laravel CSRF token from outside laravel

Question

I need to post a search form from classic asp to a laravel route. I can get the csrf token from the cookie, if there is one and put it into the form, but I don't know what to do if there is no csrf cookie?

Should I open laravel route that returns new csrf token or is that a security risk?

Is the only other option to remove the route I need to post to from csrf validation?

Are you saying you're trying to send a post request to a Laravel app from a separate ASP.NET website? — Bogdan
– Bogdan, Commented Nov 3, 2015 at 18:27
if you want you can disable csrf token stackoverflow.com/questions/37806762/… — Omi
– Omi, Commented Dec 28, 2018 at 10:13
This kind of defeats the purpose of using the CSRF tokens, no? — cfnerd
– cfnerd, Commented Jan 24, 2019 at 17:07
Since you are making a cross-site request (from asp to laravel), it doesn't make sense that you use CSRF protection for this purpose. — Niraj Shah
– Niraj Shah, Commented Jan 31, 2019 at 13:11

Mohammed Omer · Accepted Answer · 2019-06-25 16:23:48Z

2

You can disable CSRF protection for specific route in VerifyCsrfToken middleware, you will find $protected $except array you can add the routes that will not be checked for CSRF Token

/**
     * The URIs that should be excluded from CSRF verification.
     *
     * @var array
     */
    protected $except = [
        // for example
        "form/route"
    ];

answered Jun 25, 2019 at 16:23

Mohammed Omer

1,2461 gold badge12 silver badges17 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Thomas · Accepted Answer · 2019-02-01 10:37:20Z

0

Create an API endpoint using something like tymondesigns/jwt-auth. You would then request a token first then submit your form to the API endpoint with the token.

answered Feb 1, 2019 at 10:37

Thomas

8011 silver badges29 bronze badges

Collectives™ on Stack Overflow

Get laravel CSRF token from outside laravel

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related