Laravel 6 Passport CSRF token mismatch

Question

I've just created a fresh Laravel 6 project, installed the Passport functionality (Laravel Passport) and wanted to try it out. Now, in Postman I try to access the default route POST /oauth/clients, fill name and redirect arguments as expected.

At this point I'll get a "CSRF token mismatch" error, what could I be doing wrong here? I do know that this is pretty limited information to go on, ask away if more is needed.

Running the Laravel website with 'php artisan serve'.

Edit: Postman has Accept: Json/Application.

Answer 1

Here are some possible solutions for you:

1) Add Content-Type: application/json to your postman request.

---

2) Try to reinstall the client certificates by executing the command php artisan passport:install.

---

3) The CSRF check can be disabled for configured urls as stated here.

So try to add the following code to the VerifyCsrfToken class:

protected $except = [
    'oauth/clients',
];

I hope that some of those solutions will solve your problem.