Inertia.Js, Laravel, Vue 3 XSRF Token not working with HSTS server enabled

[ashafizullah]

I have a project with Inertia.Js, Laravel and Vue 3, and deployed to shared hosting, php 8.0.

But i have a problem, because HSTS server is enable on my hosting, so its force my project to use SSL and https. The problem is when i click POST, DELETE, UPDATE request, its return error 419 - Page Expired and unknown status in console log.

I have already to follow tutorial to redirect my project to https and configure the HTTPS here https://www.stackhawk.com/blog/laravel-http-strict-transport-security-guide-what-it-is-and-how-to-enable-it/, but its still not working.

I have install SSL with Lets Encrypt, activated forced https on cpanel setting, try to force https in .httaccess, but its all still not working.

Before our devOps enable HSTS security, my project running normally, and i also try to upload the project to other hosting without HSTS active, and its working normal.

How to fix this problem? So now, like it or not, i should add '*' in verifyCsrfToken.php :')