Token not recognized

@dib258

Looks like you are on 5.0.

Token verification is in this method in Illuminate\Foundation\Http\Middleware\VerifyCsrfToken.php :

/**
 * Determine if the session and input CSRF tokens match.
 *
 * @param  \Illuminate\Http\Request  $request
 * @return bool
 */
protected function tokensMatch($request)
{
    $token = $request->input('_token') ?: $request->header('X-CSRF-TOKEN');

    if ( ! $token && $header = $request->header('X-XSRF-TOKEN'))
    {
        $token = $this->encrypter->decrypt($header);
    }

    return StringUtils::equals($request->session()->token(), $token);
}

So you van debug there.

@bestmomo, Yes I'm on laravel 5.0.

So I tried to debut a little, Thanks for the right method @bestmomo and this is incoherent...

I have this input generated automatically by the Form class.

<input name="_token" type="hidden" value="kROsAFp2j9O691nGylh0SIE25fclGCBKbWDRlLcd">

In the tokensMatch I added this just over the return method :

dd($request->input('_token').' / '.$request->session()->token().' / '.$token);

That's the result :

" / kROsAFp2j9O691nGylh0SIE25fclGCBKbWDRlLcd / "    

So How is it possible that my input _token is empty ?

I checked for the X-CSRF-TOKEN I checked the X-XSRF-TOKEN in dd($request) :

There is no X-CSRF-TOKEN but there is

  "HTTP_COOKIE" => "XSRF-TOKEN=eyJpdiI6Ik9aZ0VXVHBVUlwvVFdsTFhvVmUyRXZRPT0iLCJ2YWx1ZSI6Imo0MlVJV1l0eDJMNEIzYnF0RVprZFwvU0FkcnRPRDZCWmNoc1ZFRURkeGhnSWQwZnNNbW5GVmZCd3dRajk2a09Qdm9zSGt2QzNLV1l5THRSenU5cGVCUT09IiwibWFjIjoiZDVkOWU2ODM2Y2NjYjAyOGVmYjljZTI0MTI4YzFjYjAzYzFmZTBlMTU5OTAyMDA2MGQ4MjZmNzQ5NDViNWZhNyJ9; laravel_session=eyJpdiI6IjJSRnI5ejh1aGVqdklTTXdubzJrXC93PT0iLCJ2YWx1ZSI6IjBmTFJ4a0g2bUg5RHZnUnljVDRQR3dEanhPZkEzM1JGYWxRWmFKRWZWbHZZTkVkdUtwOFFkdXYzZlR3VWllR2VWSGUyREtnbTYzNHc1YXl4SlREaTNBPT0iLCJtYWMiOiI0NDBmMThiZWE2MTE5MjA1OGE3MDgxZmQwYzQ3ZjE5YTUzYzhkMzAyZjk0ZDA3Nzc2YzRlOGEzZWZiMWFlODQyIn0%3D"

I tried to decrypt the value to see what's in it :

$this->encrypter->decrypt($request->header('X-XSRF-TOKEN'))

The result is :

DecryptException in Encrypter.php line 142: Invalid data.

Don't understand how is it possible since everywhere else forms are working...

What is you do this in your controller?

public function update() 
{
    dd(Request::all());
    
    // Other stuff here
}

It will show you all the posted data by the form, including the _token field

@bobbybouwmann , I have putted this dd($request); on top of my update method.

I said it in my first post. It nevers comme to the method.

But I have UpdateVideoRequest $request which is really not the problem I think :

<?php namespace App\Http\Requests;

use App\Http\Requests\Request;

class UpdateVideoRequest extends Request {

    public function authorize()  {
        return true;
    }

    public function rules() {
        return [
            'video' => 'request' // |mimes:wma,mov,mp4
        ];
    }
}

Shouldn't it be this?

'video' => 'required' // You had request, it should be required of course!

What happens if your remove the UpdateVideoRequest dependency, just to test it out?

@bobbybouwmann, Damn it, That's it no more coding at 4a.m. ^^

Changed it to required of course, Removed UpdateVideoRequest but the error is still there.

Man, What's this problem oO The update method is still not called.