问题描述
我有一个支付系统,数据被提交到第 3 方网站然后被拖回......
I've a payment system, where data is submitted to 3rd party site and than hauled back...
当数据返回时,它会访问特定的 url,让我们说/ok 路由.$_REQUEST['transaction'].
When data returns it hits specific url lets say /ok route. $_REQUEST['transaction'].
但是由于 Laravel 中间件,我的令牌不匹配.第三方支付 API 无法生成令牌,那么我如何禁用它?只针对这条路线?
But because of laravel middleware I'm getting token mismatch. There is no way 3rd party payment API can generate token, so how I disable it? only for this route?
或者有更好的选择吗?
Route::get('/payment/ok', 'TransactionsController@Ok'); Route::get('/payment/fail', 'TransactionsController@Fail'); public function Ok( Request $request ) { $transId = $request->get('trans_id'); if ( isset( $transId ) ) { return $transId; } }
推荐答案
从 5.1 版本开始,Laravel 的 VerifyCsrfToken 中间件允许指定从 CSRF 验证中排除的路由.为了实现这一点,您需要将路由添加到 AppHttpMiddlewareVerifyCsrfToken.php 类中的 $except 数组:
Since version 5.1 Laravel's VerifyCsrfToken middleware allows to specify routes, that are excluded from CSRF validation. In order to achieve that, you need to add the routes to $except array in your AppHttpMiddlewareVerifyCsrfToken.php class:
<?php namespace AppHttpMiddleware; use IlluminateFoundationHttpMiddlewareVerifyCsrfToken as BaseVerifier; class VerifyCsrfToken extends BaseVerifier { protected $except = [ 'payment/*', ]; }
有关详细信息,请参阅文档.
See the docs for more information.