What does HTTP status 419 (Page Expired) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: HTTP 419 is a Laravel application response commonly associated with CSRF token or session expiry.

Could be also:
Constant	Type	OS
CALL_HAS_NOT_RETURNED_WATCHDOG_TIMEOUT_LIVEDUMP	BugCheck Code	Windows

Previous	Next
HTTP_STATUS_TEAPOT	HTTP_STATUS_METHOD_FAILURE

HTTP_STATUS_PAGE_EXPIRED

Laravel uses this response when a request cannot pass its CSRF protection, frequently because the page contains an expired token or the session cookie was lost. It is not a standard HTTP status code.

Refresh the page before resubmitting, verify that the CSRF token is included, and check session cookie domain, SameSite, HTTPS, and reverse-proxy configuration. Do not disable CSRF protection to hide the symptom.

Check session and CSRF state

In Laravel deployments, 419 often accompanies a session or CSRF validation failure rather than a standardized HTTP condition. Check whether the form or API request carries the expected CSRF token and whether the backing session is still valid. Client logic should not assign universal semantics to 419 outside the product that generated it.

Laravel: CSRF Protection

Looking for a different code? Search another status or error code.