How to disable CSRF token for a component ?

[acharmat]

Hey there!

In version 2, I used the following code in my VerifyCsrfToken middleware:

`class VerifyCsrfToken extends Middleware {

protected $except = [ 
    'livewire/message/{component-name-separated-with-dashes}', 
];

}`

Now that I'm transitioning to Livewire 3, i don't want to exclude 'livewire/update'

How can I accomplish for single component this?

[mtt786]

I did this by overriding the tokensMismatch method in the VerifyCsrfToken middleware. 🙂

/**
 * Get Livewire component path from the request.
 *
 * @param  mixed  $request
 *
 * @return string|null
 */
protected function getLivewireComponentPath(mixed $request): ?string
{
    $components = $request->input('components')[0] ?? [];
    $snapshot = json_decode($components['snapshot'] ?? '{}', true);
    $memo = $snapshot['memo'] ?? [];
    return $memo['name'] ?? null;
}

/**
 * Check if the CSRF tokens match for the given request.
 *
 * @param  mixed  $request
 *
 * @return bool True if the CSRF tokens match, false otherwise.
 */
protected function tokensMatch($request): bool
{
    $componentPath = $this->getLivewireComponentPath($request);

    if ($componentPath === 'path.component-name') {
        return true;
    }

    return parent::tokensMatch($request);
}

[JuliusMaskow]

Thank you, you're awesome.