Jetstream, error 419 after session expires

[hugobaret]

Hello Laravel community,

I'm working on a project using Laravel, Inertia (Vue 3), and Jetstream, and I've encountered some issues with session expiration.

For testing, I set SESSION_LIFETIME to 1 minute. After 1 minute, I’m redirected to the login page, but sometimes I receive a 419 error:

If I wait for the session to expire on the login page and then try to log in, I get this error. The same issue occurs when I try to create a team.

Is this behavior expected? Do I need to handle this exception manually, or am I missing something?

I'm using the default Jetstream/Inertia template and have only added features in the Jetstream and Fortify configurations. Redis is set as the SESSION_DRIVER, but I experience the same error with database as well.

[noefleury]

Hi,

This is linked to CSRF token : https://laravel.com/docs/11.x/csrf

See :

framework/src/Illuminate/Foundation/Http/Middleware/VerifyCsrfToken.php

Line 95 in cdf07b6

throw new TokenMismatchException('CSRF token mismatch.');

And the error 419 is coming from there :

framework/src/Illuminate/Foundation/Exceptions/Handler.php

Line 639 in cdf07b6

$e instanceof TokenMismatchException => new HttpException(419, $e->getMessage(), $e),

[hugobaret]

Hello again thank you for the answer, I found the solution in the Error Handling documentation.