How to avoid TokenMismatchException on logout

Learn how to fix the TokenMismatchException error and handle CSRF protection issues in Laravel effectively. Follow our step-by-step guide to resolve the Laravel logout CSRF token problem and ensure a smooth logout experience.

Many time we faced TokenMismatchException error in laravel, this error occurred If you stay too long time on one form or if your system stay on idle or you are not active on your computer, and then again try to fill this form.

At that time you may get a TokenMismatchException error, because the CSRF token won’t be the same. recently many time we found this problems in logout time. So, In this example i will show you to how to avoid it.

Normally, if you are not active for long time in your system then you will get this error.

To avoid TokenMismatchException error, we may add exceptions for the URLs that we don’t want to have CSRF protection. There are special array for that in app/Http/Middleware/VerifyCsrfToken.php

 class VerifyCsrfToken extends Middleware
  {
      /**
        * The URIs that should be excluded from CSRF verification.
        *
        * @var array
        */
      protected $except = [
          //
      ];
  }  
 

So what we need do, just add logout into this array

 
  protected $except = [
  '/logout'
    ]; 

If you want to add more URLs then you can add here, but CSRF protection is also important.

For more detail you can write Laravel Documentation

You may also find interesting:

Effortlessly Log Out Users from Other Devices in Laravel 11 – Ultimate Guide