如何使用CSRF令牌发布到Laravel API？

Question

I am creating an API using laravel and I noticed that when trying to create a form for POST, I need to use csrf token. However, I will be using this API for a mobile app. How do I post to laravel with a token? Do I have to fetch it in laravel first or should I just place an exception in the middleware?

If I should be using the csrf token, does it expire? How long does it last?

Answer 1

You should use other authentication ways. OAuth, JWT... Laravel passport is a powerful way to do that. A service for mobile app, specially mobile app, will need those authentication types. CSRF Token is working a lil bit different way