You should exclude your api written in Laravel
from CSRF Protection check middleware by default VerifyCsrfToken
middleware is applied to route group web
so here you are having two options :-
-
Create a new middleware group named
api
code snippet for creating a middleware
routes.phpRoute::group(['prefix' => 'api/v1','middleware' => ['api']], function () {
Route::get('/hotel/list',[
'uses' => 'YourController@function'
]);
});VerifyCsrfToken.php
protected $except = [
'api/v1/*',
]; -
Directly exclude routes for CSRF check
InVerifyCsrfToken.php
add all api’s url which you want to ignore for CSRF checkclass VerifyCsrfToken extends BaseVerifier
{
/**
* The URIs that should be excluded from CSRF verification.
*
* @var array
*/
protected $except = [
'url_regex'
];
}
First method is more suggested as for all future new routes addition would work out we just need to add that route under this middleware group.
Let me know in comments if it worked out or if have any query.
1
solved Node Js access to api laravel