1
このルートだけでCsrfTokenを無効にするにはどうすればよいですか? Webミドルウェアを使用すると機能しません。この方法を使用すると機能しません。助けてください これは私のルータである:Laravel 5.2 disable csrf_token
Route::post('payment_check/{order_id}', ['as' => 'payment', 'uses' => 'users\[email protected]_check']);
、ここではそれは
protected $except = [
'payment_check/*'
];
する必要があります私のverifycsrftoken.php
protected $except = [
'payment'
];
とKernel.php
protected $middleware = [
\Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode::class,
];
/**
* The application's route middleware groups.
*
* @var array
*/
protected $middlewareGroups = [
'web' => [
\App\Http\Middleware\EncryptCookies::class,
\Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
\Illuminate\Session\Middleware\StartSession::class,
\Illuminate\View\Middleware\ShareErrorsFromSession::class,
\App\Http\Middleware\VerifyCsrfToken::class,
],
'api' => [
'throttle:60,1',
],
];
/**
* The application's route middleware.
*
* These middleware may be assigned to groups or used individually.
*
* @var array
*/
protected $routeMiddleware = [
'auth' => \App\Http\Middleware\Authenticate::class,
'auth.basic' => \Illuminate\Auth\Middleware\AuthenticateWithBasicAuth::class,
'can' => \Illuminate\Foundation\Http\Middleware\Authorize::class,
'userAccess' => \App\Http\Middleware\userAccessMiddleWare::class,
'guest' => \App\Http\Middleware\RedirectIfAuthenticated::class,
'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
];
csrfはクロスサイトリクエスト偽装からの保護です。無効にすることは悪いことです! – lewis4u