API 调用在 postman 上返回，但在调用并登录浏览器时返回 500 内部服务器错误

Question

This is related to Laravel 5.4 and its Passport Password Grant.

I have routes for obtaining an access_token for the user to use that works completely fine.

I also have a route to refresh the token should the current access token expire.

When I use Postman to hit the route

http://192.168.10.10/refresh

I get this back which is valid:

"data": {
    "access_token": "eyJ0eXAiOiJKV1QiLCJhbGciOi...deleting most of it.",
    "expires_in": 600
}

However when I hit the route from the browser, using axios via this code:

let  headers = { 'Content-type': 'application/json' }
return axios.post("http://192.168.10.10/refresh", {headers: headers}).then(res => {
    if (res) return res;
        }).catch(err => {
            if (err) return err.response;
        });

I get an HTTP 500 Error status code.

I'm tailing the laravel log for errors as well and this is the stack trace.

[2017-08-30 07:21:41] local.ERROR: GuzzleHttp\\Exception\\ClientException: Client error: POST http://192.168.10.10/oauth/token resulted in a 400 Bad Request response: {"error":"invalid_request","message":"The request is missing a required parameter, includes an invalid parameter value, (truncated...) in /home/vagrant/Code/work/vendorgraphs-api/vendor/guzzlehttp/guzzle/src/Exception/RequestException.php:113

The other part of this error is that it may be a malformed value.

Doesn't make sense to me and I've tried everything from making curl requests directly from PHP code and also used http_query_builder functionality.

Cache-Control →no-cache, private
Connection →keep-alive
Content-Type →application/json

This is what's set on Postman with the request. I am sending those headers from the browser as well. Any ideas on what might be causing the issue? This is driving me crazy.

    public function refreshToken(Request $request) 
{     
    if (!is_null($request)) {
        $refreshToken = $request->cookie(self::REFRESH_TOKEN);

        $http = new Guzzle();
        $response = $http->request('POST','http://192.168.10.10/oauth/token', [
            'form_params' => [
                'grant_type' => 'refresh_token',
                'refresh_token' => $refreshToken,
                'client_id' => env("PASSWORD_GRANT_CLIENT_ID"),
                'client_secret' => env("PASSWORD_GRANT_SECRET"),
                'scope' => '',
            ]
        ]);
        $data = json_decode($response->getBody());
        $this->cookie->queue(
            self::REFRESH_TOKEN,
            $data->refresh_token,
            864000, // 10 days
            null,
            null,
            false,
            true // HttpOnly
        );

        return response()->json([
            'payload' => [
                'access_token' => $data->access_token,
                'expires_in' => $data->expires_in
            ]
        ]);

    } else {
        return response()->json("Could not refresh token", 401);
    }
}

And here's the content for the postman request.

HERE'S WHERE I'M CONFUSED.

No parameters are being passed through this POST request. CORS is enabled on my api, not receiving pre-flight errors. Headers are the same on both requests. The only difference is, Postman being used and Axios being used. Nothing changes, except for where the request is being made, via Postman or browser.

Answer 1

content-type in your browser is text/html whereas in the postman is application/json

Set the content-type to application/json and it should work