Keep the same laravel_session between api requests

Question

I am working on an authentication workflow with Laravel Passport, but the laravel_session cookie changes every time, which is causing issues.

I am not sure how to fix it. And this is what I've tried so far:

In app.php:

$middleware->api([
            \Illuminate\Session\Middleware\StartSession::class,
        ]);

In my .env file:

SESSION_DRIVER=database
SESSION_DOMAIN=site.test
SESSION_SAME_SITE=none
SESSION_SECURE_COOKIE=false
SESSION_LIFETIME=120

Has anyone managed to keep the same cookie in all api requests of a logged-in user?

API means stateless session, so there is no cookies like in the stateful sessions. You need to authentifie/distinguish the user/session with a token that you create for the user when he log in / starts his browsing. — N69S
– N69S, Commented Jan 28 at 11:53

WeiCheng · Accepted Answer · 2025-01-23 04:00:34Z

0

maybe what u need is not session but jwt-token?

u can try this tymon/jwt-auth

answered Jan 23 at 4:00

WeiCheng

371 silver badge4 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Motunrayo Koyejo · Accepted Answer · 2025-01-28 11:23:39Z

0

If you’re building a stateless API, relying on laravel session cookies isn’t recommended. Instead use API tokens (e.g, Bearer tokens) to authenticate requests.

answered Jan 28 at 11:23

Motunrayo Koyejo

3822 silver badges6 bronze badges

Collectives™ on Stack Overflow

Keep the same laravel_session between api requests

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related