Laravel 捕获 TokenMismatchException

发布于03月18日

Can the TokenMismatchException be catched using try catch block? Instead of displaying the debug page that shows the "TokenMismatchException in VerifyCsrfToken.php line 46...", I want it to display the actual page and just display an error message.

I have no problems with the CSRF, I just want it to still display the page instead of the debug page.

要复制(使用firefox):

打开页面(http://example.com/login)
Clear Cookies (Domain, Path, Session). I am using web developer toolbar plugin here.
Submit form.

Actual Results: "Whoops, looks like something went wrong" page displays. Expected Results: Still display the login page then pass an error of "Token mismatch" or something.

请注意，当我清除cookies时，我没有刷新页面，以便令牌生成新密钥并强制其出错.

更新(新增表格):

        <form class="form-horizontal" action="<?php echo route($formActionStoreUrl); ?>" method="post">
        <input type="hidden" name="_token" value="<?php echo csrf_token(); ?>" />
        <div class="form-group">
            <label for="txtCode" class="col-sm-1 control-label">Code</label>
            <div class="col-sm-11">
                <input type="text" name="txtCode" id="txtCode" class="form-control" placeholder="Code" />
            </div>
        </div>
        <div class="form-group">
            <label for="txtDesc" class="col-sm-1 control-label">Description</label>
            <div class="col-sm-11">
                <input type="text" name="txtDesc" id="txtDesc" class="form-control" placeholder="Description" />
            </div>
        </div>
        <div class="form-group">
            <label for="cbxInactive" class="col-sm-1 control-label">Inactive</label>
            <div class="col-sm-11">
                <div class="checkbox">
                    <label>
                        <input type="checkbox" name="cbxInactive" id="cbxInactive" value="inactive" />&nbsp;
                        <span class="check"></span>
                    </label>
                </div>
            </div>
        </div>
        <div class="form-group">
            <div class="col-sm-12">
                <button type="submit" class="btn btn-primary pull-right"><i class="fa fa-save fa-lg"></i> Save</button>
            </div>
        </div>
    </form>

Nothing really fancy here. Just an ordinary form. Like what I've said, the form is WORKING perfectly fine. It is just when I stated the above steps, it errors out due to the TOKEN being expired. My question is that, should the form behave that way? I mean, when ever I clear cookies and session I need to reload the page too? Is that how CSRF works here?

<?php namespace App\Exceptions; use Exception; use Illuminate\Foundation\Exceptions\Handler as ExceptionHandler; use Illuminate\Session\TokenMismatchException; class Handler extends ExceptionHandler { /** * A list of the exception types that should not be reported. * * @var array */ protected $dontReport = [ 'Symfony\Component\HttpKernel\Exception\HttpException' ]; /** * Report or log an exception. * * This is a great spot to send exceptions to Sentry, Bugsnag, etc. * * @param \Exception $e * @return void */ public function report(Exception $e) { return parent::report($e); } /** * Render an exception into an HTTP response. * * @param \Illuminate\Http\Request $request * @param \Exception $e * @return \Illuminate\Http\Response */ public function render($request, Exception $e) { if ($e instanceof TokenMismatchException){ // Redirect to a form. Here is an example of how I handle mine return redirect($request->fullUrl())->with('csrf_error',"Oops! Seems you couldn't submit form for a long time. Please try again."); } return parent::render($request, $e); } }

Laravel 捕获 TokenMismatchException

推荐答案

Laravel相关问答推荐

如何使用 Laravel 进行继承

Laravel 9 中使用 WHERE 子句的列的 SUM

将 ID 传递给资源控制器进行编辑

如何传递多个参数给路由

无法使用 Dompdf Laravel 9 加载图像

mysql 加入 ON 和 AND 到 laravel eloquent

Laravel 在维护模式下显示自定义消息

如何在 laravel 5.2 中显示 500 内部服务器错误页面？

我怎样才能了解更多关于我的 Laravel 排队作业(job)失败的原因？

Laravel 5.2 中的正则表达式验证

Laravel 中的合同和 PHP 中的接口有什么区别？

laravel 5 中的登录事件处理

如何使用中间件将标头添加到响应中？

WhereHas Laravel 中的关系计数条件是什么

将自定义消息(或任何其他数据)传递给 Laravel 404.blade.php

如何在不使用视图的情况下使用 Laravel 4 发送Electron邮件？

在 Laravel 中按用户名查找用户

改变模式生成器中的列长度？

Laravel 隐藏属性.例如密码 - 安全

Laravel 获取查询字符串