What does HTTP status 419 (Page Expired) mean?

HTTP_STATUS_PAGE_EXPIRED

Laravel uses this response when a request cannot pass its CSRF protection, frequently because the page contains an expired token or the session cookie was lost. It is not a standard HTTP status code.

Refresh the page before resubmitting, verify that the CSRF token is included, and check session cookie domain, SameSite, HTTPS, and reverse-proxy configuration. Do not disable CSRF protection to hide the symptom.

Check session and CSRF state

In Laravel deployments, 419 often accompanies a session or CSRF validation failure rather than a standardized HTTP condition. Check whether the form or API request carries the expected CSRF token and whether the backing session is still valid. Client logic should not assign universal semantics to 419 outside the product that generated it.

Laravel: CSRF Protection