Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

Zoul's avatar
Level 5

This password reset token is invalid.

Hi all, My website is hosted in cpanel and a user is trying to reset a password but its getting 500 SERVER ERROR when they click the link recieved in their email :

https://www.example.com/en/user/reset/password/634d965eb4232829a55642f8d8c98f45be2fa401aa4249fb8ae32249fb67fd7a

It seems showResetForm() method its not getting the right token, i tested the return request values and its returning null dd($request->all()); [] // app/Http/Controllers/User/Auth/ResetPasswordController.php:39

  public function showResetForm(Request $request, $token = null)
    {
       dd($request->all());
        return view('user.auth.passwords.reset')->with(
            ['token' => $token, 'email' => $request->email]
        );
    }

i also have in head tag <meta name="csrf-token" content="{{ csrf_token() }}">

This is also multilanguage website

I appreciate your help!

0 likes
3 replies
vincent15000's avatar
Level 63

To reset the password, you have to use the reset password token and not the CSRF token.

The reset password token is generated using the user email and stores some informations like the expiration time to prevent anybody else to use the link.

To retrieve the reset password token, you need to use the request.

$token = request()->route('token');

Please or to participate in this conversation.