Preserve X-Xsrf-Token header from .htaccess (#6520)

* Preserve X-Xsrf-Token header from .htaccess Preserve X-Xsrf-Token header for session based authentication when building API in Laravel * Update .htaccess * Update .htaccess --------- Co-authored-by: Taylor Otwell <[email protected]>
2025-01-14 14:03:16 -06:00
parent d4e9385fbb
commit f15301d18d
1 changed files with 4 additions and 0 deletions
@@ -9,6 +9,10 @@
    RewriteCond %{HTTP:Authorization} .
    RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

+    # Handle X-XSRF-Token Header
+    RewriteCond %{HTTP:x-xsrf-token} .
+    RewriteRule .* - [E=HTTP_X_XSRF_TOKEN:%{HTTP:X-XSRF-Token}]
+
    # Redirect Trailing Slashes If Not A Folder...
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteCond %{REQUEST_URI} (.+)/$