Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

wipflash's avatar

Form Request Token and Session token mismatch

In my application Form request token and session stored token an invalid always. this cause to token mismatch exception. How this possible and how I fix this?

(This is cloned from a working application it is working without this error.)

array:2 [▼
  0 => array:3 [▼
    "_token" => "mqZQwEybl2e89qAfo4Z60l6odXIpPiNCS2v29iFU"
    "username" => "ad"
    "password" => "asdasd"
  ]
  1 => array:1 [▼
    "_token" => "iAe6XxmME8FnTNLJ2L8gvWOAFJPo7fYF94Blucqr"
  ]
]
0 likes
2 replies
wipflash's avatar

Nope. Here is my kernal

<?php

namespace App\Http;

use Illuminate\Foundation\Http\Kernel as HttpKernel;

class Kernel extends HttpKernel {
    // Localization Trait
    use \Arcanedev\Localization\Traits\LocalizationKernelTrait;
    /**
     * The application's global HTTP middleware stack.
     *
     * These middleware are run during every request to your application.
     *
     * @var array
     */
    protected $middleware = [
        \Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode::class,
    ];

    /**
     * The application's route middleware groups.
     *
     * @var array
     */
    protected $middlewareGroups = [
        'web' => [
            \App\Http\Middleware\EncryptCookies::class,
            \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
            \Illuminate\Session\Middleware\StartSession::class,
            \Illuminate\View\Middleware\ShareErrorsFromSession::class,
            \App\Http\Middleware\VerifyCsrfToken::class,
        ],

        'api' => [
            'throttle:60,1',
        ],
    ];

    /**
     * The application's route middleware.
     *
     * These middleware may be assigned to groups or used individually.
     *
     * @var array
     */
    protected $routeMiddleware = [
        'auth' => \App\Http\Middleware\Authenticate::class,
        'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
        'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
        'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
        'registration' => \App\Http\Middleware\Registration::class,
        'social.login' => \App\Http\Middleware\SocialLogin::class,
        'role' => \Zizaco\Entrust\Middleware\EntrustRole::class,
        'permission' => \Zizaco\Entrust\Middleware\EntrustPermission::class,
        'ability' => \Zizaco\Entrust\Middleware\EntrustAbility::class,
        'session.database' => \App\Http\Middleware\DatabaseSession::class,
    ];
}

Please or to participate in this conversation.