diff --git a/app/Http/Middleware/VerifyCsrfToken.php b/app/Http/Middleware/VerifyCsrfToken.php index 7f287fcf..be50c1d6 100644 --- a/app/Http/Middleware/VerifyCsrfToken.php +++ b/app/Http/Middleware/VerifyCsrfToken.php @@ -17,7 +17,7 @@ class VerifyCsrfToken implements Middleware { */ public function handle($request, Closure $next) { - if ($request->method() == 'GET' || $this->tokensMatch($request)) + if ($this->isReadOnly($request) || $this->tokensMatch($request)) { return $next($request); } @@ -36,4 +36,15 @@ protected function tokensMatch($request) return $request->session()->token() == $request->input('_token'); } + /** + * Determine if the HTTP request uses a ‘read’ verb. + * + * @param \Illuminate\Http\Request $request + * @return bool + */ + protected function isReadOnly($request) + { + return in_array($request->method(), ['GET', 'OPTIONS']); + } + }