laravel/public/.htaccess
TheCodeholic f15301d18d
Preserve X-Xsrf-Token header from .htaccess (#6520)
* Preserve X-Xsrf-Token header from .htaccess

Preserve X-Xsrf-Token header for session based authentication when building API in Laravel

* Update .htaccess

* Update .htaccess

---------

Co-authored-by: Taylor Otwell <taylor@laravel.com>
2025-01-14 14:03:16 -06:00

26 lines
740 B
ApacheConf

<IfModule mod_rewrite.c>
<IfModule mod_negotiation.c>
Options -MultiViews -Indexes
</IfModule>
RewriteEngine On
# Handle Authorization Header
RewriteCond %{HTTP:Authorization} .
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
# Handle X-XSRF-Token Header
RewriteCond %{HTTP:x-xsrf-token} .
RewriteRule .* - [E=HTTP_X_XSRF_TOKEN:%{HTTP:X-XSRF-Token}]
# Redirect Trailing Slashes If Not A Folder...
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_URI} (.+)/$
RewriteRule ^ %1 [L,R=301]
# Send Requests To Front Controller...
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !-f
RewriteRule ^ index.php [L]
</IfModule>