laravel 9 - problem with CSRF TOKEN

[marvofmay]

Hi.
I've got problem on start.
When I run example test, I've got:

The request we sent was:

Method: GET
URL: http://127.0.0.1:8000/cypress/csrf_token
Headers: {
"Connection": "keep-alive",
"user-agent": "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36",
"accept": "/",
"accept-encoding": "gzip, deflate"
}

What should I do ?

[marvofmay]

ok, the command "php artisan optimize" fixed problem

[siubie]

Hi I also have this problem and i solve it by adding app key to the .env.cypress file
notes : i have 2 .env files one for cypress and other for development

[fylzero]

Also have bumped into this problem a number of times and I have tried the suggestions above and have been trying to solve this for an absurd amount of time. Please help.

[mikejw]

I opened a PR for this here: #95

In my case, the package endpoints were being called without explicitly requesting JSON responses. Adding Accept: application/json to the internal Cypress requests fixed the misleading 500 responses I was seeing.

For anyone debugging the same issue, I confirmed what was reaching Laravel by adding a temporary route like this:

Route::any('/debug-cypress-hit', function () {
    logger()->info('cypress reached laravel', [
        'method' => request()->method(),
        'url' => request()->fullUrl(),
        'host' => request()->getHost(),
        'scheme' => request()->getScheme(),
        'user_agent' => request()->userAgent(),
        'ip' => request()->ip(),
        'headers' => request()->headers->all(),
    ]);

    return response()->json(['ok' => true]);
});

One confusing part: when I called the route with cy.visit(uri), I did not see this debug output while the Cypress plugins provided by this package were enabled. After temporarily disabling those Cypress plugins, Cypress showed a notice suggesting that the correct headers should be used for cy.visit()/cy.request() calls. That led me to try adding the explicit Accept: application/json header.