CSRF token mismatch for domain redirects

@amitsolanki24_ yes I did that

VerifyCSRFToken.php :

protected $except = [
        '/auth/event',
        '/auth/catalog'
 ];

Route :

Route::group(['domain' => '{subdomain}.{domain}.{tld}', 'middleware' => ['catalog.identify',],
], function() {
Route::post('/auth/catalog', 'CatalogController')->name('catalog.auth');
Route::post('/auth/event', 'EventController')->name('event.auth');
});

Do you get this issue when redirecting between different sub domains?

@gych yes

Which domain have you set in session config?

@gych my app domain. (note : and the custom domains or redirected domains would be dynamic and different for each of the users)

@Binny Patel can you share your sub domain redirecting code

@gych yes its defined in same manner with a .

@Binny Patel Do domain and subdomain share same code or other

Which session driver are you using?

@gych SESSION_DRIVER = file

@amitsolanki24_ Same code There is a middleware for it where before fetching data we check whether its the app domain or custom domain

public function handle($request, Closure $next)
    {
        $domain = $request->route()->parameters['subdomain'] . '.' . $request->route()->parameters['domain'] . '.' . $request->route()->parameters['tld'];
        app()->singleton('domain', function () use ($request, $domain) {
            return [
                'fqdn' => $domain,
                'subdomain' => $request->route()->parameters['subdomain'],
                'domain' => $request->route()->parameters['domain'],
                'tld' => $request->route()->parameters['tld'],
            ];
        });

        // Custom domains
        if (!Str::contains($domain, config('_app.app_domain'))) {
            $photoCatalog = Query to fetch data;
        }

        // Subdomains
        if (empty($photoCatalog)) {
            if (!Arr::has($request->route()->parameters, 'subdomain')) {
                return abort(404);
            }

            $subdomain = $request->route()->parameters['subdomain'];

            if ($subdomain === 'domain') {
                return response()->redirectTo('https://app.' . config('_app.app_domain'));
            }

            $photoCatalog = Query to fetch data;
        }

        app()->singleton('photoCatalog', function () use ($photoCatalog) {
            return $photoCatalog;
        });

        return $next($request);
    }

Use another session driver like database or cookie I remember someone having the same issue by using file as session driver in the past. Can't directly find the related post right now.