Laravel framework Alipay payment fails to receive asynchronous callback request [original]

Link to the original text

stay laravel Use Alipay sandbox environment test to pay , It is found that the asynchronous callback method has never been requested . Many people on the Internet say that check whether the authorization callback address is configured incorrectly , But in fact, the authorization callback address has nothing to do with the asynchronous callback address .

The official documents have made it clear , So just rule it out .

Many other answers refer to checking the configuration notify_url Whether the configuration is correct , Must be based on http or https The full address accessible from the public network at the beginning （ Or local test Ngrok Intranet through ）, The address cannot be followed by parameters, etc . Generally speaking, these problems seldom occur , And what I encountered has nothing to do with these problems .

Finally, it is found that the callback address is set to support only get request , From the description of asynchronous notification in the above figure, we can see that Alipay is through POST Request this address by , Therefore, the routing access must be set to POST Can request , Of course you can set it any wait .

This is not the end , Check the log and find that the method is still not requested . We can only continue to check , Finally found laravel stay post By default, a request will be made CSRF Protect , Therefore, Alipay was directly intercepted when requesting the address because it did not pass the token verification . To do this, we need to turn off token validation for this address , There are many ways to solve this problem .

You can comment out Kernel.php Medium VerifyCsrfToken middleware , In this way, all requests will not be subject to token verification , You can also add a token whitelist .