Level 13
You will get an error if you don’t include the @csrf
Jul 14, 2021
8
Level 1
hidden csrf token
i am learning vue js I have few queries regarding the hidden token we used to send through the form blade file. don't we need to send the csrf token through form for store update delete mothod . If not then doesnt it lead to delete /update/store the data through url
<form action="" method="post">
@csrf
</form>
don't we need to send that csrf token through form field value in vue js form as we used to in laravel blade file ?
Level 1
if we get error then how can we resolve this in vue js
Level 55
@freemium what do you use to perform form submission?
if ajax: check it here https://laravel.com/docs/8.x/csrf#csrf-x-csrf-token
if axios: it get's it from meta name="csrf-token" automatically
if you use plain form submission in vue (it's strange, btw) - add to the form, and in mounted hook set token value as
$('meta[name="csrf-token"]').attr('content')
Level 1
does making the call to post/update/delete the project using axios not require a csrf token, like when you try to submit it using the default form flow?
Level 55
@freemium https://laravel.com/docs/8.x/csrf#csrf-x-xsrf-token
This cookie is primarily sent as a developer convenience since some JavaScript frameworks and libraries, like Angular and Axios, automatically place its value in the X-XSRF-TOKEN header on same-origin requests.
it means if you use axios - you do not need to do anything. It will automatically appends X-XSRF-TOKEN to all your post/put/delete requests
Level 1
@silencebringer you mean to say csrf token is automatically places ...in bootstrap.js file i kept like this ...
window.axios.defaults.headers.common['X-Requested-With'] = 'XMLHttpRequest';
i is ok or i need some improvement in my file ....
Level 55
@freemium you do not need to do anything more. Laravel bootstrap is enough to use axios. Just try to do axios.post (or put, or delete) call and it should works (no 419 Page expired exception)
Level 13
It depends on your code. What have you tried ? First you have to get the error in order to get help
Please or to participate in this conversation.