Lumen Enable CSRF Token

Question

I know lumen is used to session less API development still i have a situation where i need to enable CSRF token.Session every think works fine but i need to enable csrf token if i add

<input type="hidden" name="_token" value="{{ csrf_token() }}">

in form i got error

(1/1) ReflectionException Class Laravel\Lumen\Http\Middleware\VerifyCsrfToken does not exist

In bootstrap/app.php i have uncommented following

$app->middleware([
      'Illuminate\Cookie\Middleware\EncryptCookies',
     'Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse',
     'Illuminate\Session\Middleware\StartSession',
   'Illuminate\View\Middleware\ShareErrorsFromSession',
    'Laravel\Lumen\Http\Middleware\VerifyCsrfToken',
 ]);

even i have enabled

$app->routeMiddleware([
    'auth' => App\Http\Middleware\Authenticate::class,
    'csrf' => 'Laravel\Lumen\Http\Middleware\VerifyCsrfToken'
]);

if i comment csrf in middleware then i get following error

Call to undefined function csrf_token() in blade

I am using laravel "laravel/lumen-framework": "5.5.*",

can any one help me how i can enable VerifyCsrfToken in lumen

Does the class at least exist? Have you tried the typical "composer dump-autoload" ? — Amarnasan
@Amarnasan.where it will be actually.even i searched for that fiel but didntf found — scott
if it is ok you can use JWT for your requirement. it's bit easy to use with Lumen — Mr. Pyramid

cjmling cjmling · Accepted Answer · 2018-12-12T10:56:33

Had this same issue. Posting here if someone in future.

Found out that they removed all csrf stuff from lumen since 5.2 (not exactly sure since which version). To use csrf in Lumen 5.5 or later you need to create yourself or copy VerifyCsrfToken middleware file from laravel package of that specific version (find in github) and place in lumen middleware folder and adjust the path in bootstrap/app.php accordingly.

You may need to install illuminate/cookie or other required package manually as well.

VerifyCsrfToken.php file can be found at laravel/framework/src/illuminate/Foundation/Http/Middleware/VerifyCsrfToken.php

Lumen Enable CSRF Token

2 Answers