Csrf token with VueJS integrated into Laravel (no API mode)

Hello,

I don't know if it is a Laravel problem or a VueJS problem.

I'm now using pretty well vuejs (first time 2 months ago) but I'm not a specialist.

I'm working on an application with :

• back : Laravel 8
• front : VueJS 2

No API mode, VueJS is integrated in Laravel.

I have this problem : it seems that the CSRF token doesn't exist in my requests when I want to submit forms using axios.

What's strange is that the controller executes the create method even if there is no scrf token. This means I can create a new course without any CSRF token.

If you have any idea, thanks a lot because I search for the solution for a week at least.

Here are some parts of my code.

Routes

Route::middleware(['auth', 'verified', 'active'])->group(function() {

    Route::middleware(['member'])->prefix('members')->name('members.')->group(function() {
        Route::get('courses', [CourseController::class, 'list']);
        Route::get('course/{id}', [CourseController::class, 'get']);
        Route::post('course', [CourseController::class, 'create']);
        Route::put('course/{id}', [CourseController::class, 'update']);
        Route::delete('course/{id}', [CourseController::class, 'delete']);
	}
}

Controller

public function create(Request $request)
{
    $this->authorize('create', Course::class);
    DB::transaction(function () use ($request) {
        $course = new Course;
        $course->fill($request->all());
        $course->save();
        $course->trainers()->sync($request->trainerIds);
    });
}

Course component (VueJS)

methods: {
    saveCourse() {
        if (this.initCourseParams.courseId > 0) {
            this.$store.dispatch('courses/updateCourse', this.course)
        } else {
            this.$store.dispatch('courses/createCourse', this.course)
        }
        this.close()
    }
}

Actions in the VueJS store

actions: {

	createCourse({commit, dispatch, state}, course) {
		course.start_date = course.date+' '+course.start_time
		course.end_date = course.date+' '+course.end_time
		axios
			.post('/members/course', course)
			.then(response => {
				dispatch('getCoursesByTraining', state.trainingId)
			})
	}
}

Thanks a lot for your help.