修改Kernel.php 將global middleware的 'App\Http\Middleware\VerifyCsrfToken' 移動到route middleware 'csrf' => 'App\Http\Middleware\VerifyCsrfToken'
class Kernel extends HttpKernel { /** * The application's global HTTP middleware stack. * * @var array */ protected $middleware = [ 'Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode', 'Illuminate\Cookie\Middleware\EncryptCookies', 'Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse', 'Illuminate\Session\Middleware\StartSession', 'Illuminate\View\Middleware\ShareErrorsFromSession', ]; /** * The application's route middleware. * * @var array */ protected $routeMiddleware = [ 'auth' => 'App\Http\Middleware\Authenticate', 'auth.basic' => 'Illuminate\Auth\Middleware\AuthenticateWithBasicAuth', 'guest' => 'App\Http\Middleware\RedirectIfAuthenticated', 'csrf' => 'App\Http\Middleware\VerifyCsrfToken', ]; } 此種作法將會取消全局的驗證,如果要加上驗證機制必須在該route的地方 加上 'middleware' => 'csrf'...