Why I receive "CSRF token mismatch" while running tests in laravel?

Question

I want to run my tests without receiving "CSRF token mismatch" exceptions. In the laravel documentation is noted that:

The CSRF middleware is automatically disabled when running tests.

the line of code where the exception is thrown looks like this:

$response = $this->json('POST', route('order.create'), [
     'product_id', $product->id
]);

and for running tests I am working in my zsh terminal:

php artisan test --env=testing

This is my test class:

<?php

   namespace Tests\Feature;

   use Illuminate\Foundation\Testing\RefreshDatabase;
   use Illuminate\Foundation\Testing\WithFaker;
   use Illuminate\Foundation\Testing\WithoutMiddleware;
   use Tests\TestCase;

  class SessionCartTest extends TestCase
  {
      public function testExample()
      {
          $product = \App\Product::inRandomOrder()->first();
          $response = $this->postJson(route('order.insert'), [
              'product_id' => $product->id,
          ]);
          $response->assertStatus(200); // here I receive 419
      }
  }

What am I doing wrong and how could I fix this? I am using laravel 7.

Why are you using an artisan command to run the tests? What happens when you run phpunit on your console? Are you sure that you are getting a CSRF exception? — Diogo Gomes
– Diogo Gomes, Commented Apr 9, 2020 at 7:56
Its the same when running phpunit. I am dumping the response and I see what's inside, also the HTTP error code is 419. — Mihai Crăiță
– Mihai Crăiță, Commented Apr 9, 2020 at 8:31
in the Illuminate\Foundation\Http\Middleware\VerifyCsrfToken constructor somehow sets the $app->env to "local" instead of "testing" — Mihai Crăiță
– Mihai Crăiță, Commented Apr 9, 2020 at 13:30

Daniel Katz · Accepted Answer · 2020-08-23 12:34:16Z

64

I ran into this problem x times now and each time I fix it by running: php artisan config:clear

answered Aug 23, 2020 at 12:34

Daniel Katz

2,4383 gold badges28 silver badges27 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

cfkane Over a year ago

I need to make a mug that says this or something. So many times i've found some very strange behavior and this has fixed it.

Mark Joshua Fajardo Over a year ago

Found so many strange behavior. This saved my OT. Thanks!

Matanya Over a year ago

Thanks so much. I saw red all across the board and panicked...

ben04rogers Oct 21 at 13:24

This worked for me, but what does it do?

Diogo Gomes · Accepted Answer · 2020-04-09 11:24:44Z

24

Probably the APP_ENV is not being set to testing.

You can set a ENV variable in the command line by preceding the php command.

So on your case set the environment to testing and run the artisan command by:

APP_ENV=testing php artisan test

answered Apr 9, 2020 at 11:24

Diogo Gomes

2,26518 silver badges13 bronze badges

1 Comment

Mihai Crăiță Over a year ago

Same. Indeed, the problem is the environment not being set correctly, even though I added it explicitly. Something is overwriting it... before calling the Middleware

Yuba · Accepted Answer · 2022-08-07 18:51:38Z

2

When you are running tests on Docker where the APP_ENV is hard coded with other values than testing (dev, local) in docker-compose.yaml file, phpunit cannot execute tests properly. You will need to delete the all APP_ENV in docker files.

answered Aug 7, 2022 at 18:51

Yuba

1031 silver badge7 bronze badges

Comments

Brian Lee · Accepted Answer · 2020-04-09 13:30:04Z

1

Your data array is wrong. Try the following change:

$response = $this->postJson(route('order.insert'), [
      'product_id' => $product->id, // use the arrow notation here.
 ]);

answered Apr 9, 2020 at 13:30

Brian Lee

18.3k3 gold badges45 silver badges55 bronze badges

5 Comments

Mihai Crăiță Over a year ago

yes, that's a typo, fixed, but I still get the exception "Expected status code 200 but received 419. Failed asserting that false is true." Maybe is something super obvious that I miss..

Mihai Crăiță Over a year ago

that's how my route is defined in web Route::post('/order', 'OrderController@insert')->name('order.insert');

Brian Lee Over a year ago

Try running php artisan cache:clear before running your tests.

Mihai Crăiță Over a year ago

I fixed it, it was from the config cache. I also had to remove the lines from phpunit.xml regarding DB_CONNECTION sqlite and DB_DATABASE. Thanks for all the hints!

Daniel Katz Over a year ago

To be clear, its was the php artisan config:clear command which did the trick for me

Jakob Eriksson · Accepted Answer · 2022-12-01 14:30:25Z

1

This works by setting a custom csrf-token

$this
   ->withSession(['_token' => 'bzz'])
   ->postJson('/url', ['_token' => 'bzz', 'other' => 'data']);

answered Dec 1, 2022 at 14:30

Jakob Eriksson

18.8k1 gold badge30 silver badges34 bronze badges

Collectives™ on Stack Overflow

Why I receive "CSRF token mismatch" while running tests in laravel?

5 Answers 5

4 Comments

1 Comment

Comments

5 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

5 Answers 5

4 Comments

1 Comment

Comments

5 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related