I can't get flash messages to forward from Laravel

[littleblue50]

I've been at this days and followed every guide and still can't get this working. I'd really appreciate any help. I'm doing a simple redirect from my controller to the same page, yet the flash never appears.

Laravel 9.5.1
inertia-laravel 0.5.4
inertia-vue 0.8.0
inertia 0.11.0

Controller.php

return Redirect::route('home')->with(['error' => "There seems to be something wrong"]);

HandleInertiaRequests.php

return array_merge(parent::share($request), [
            'flash' => [
                'error' => fn () => $request->session()->get('error')
            ],
]);

Session response every time

"_token" => "dpAKI4sNaL1pkIS5hQySJNXQ5k4FlgD6dsBCFSQB"
  "_flash" => array:2 [[▼]()
    "old" => []
    "new" => []
  ]
  "login_web_59ba36addc2b2f9401580f014c7f58ea4e30989d" => 1
  "_previous" => array:1 [[▼]()
    "url" => "http://site.test/home"
  ]

[WalrusSoup]

I believe the feature you need to leverage is Flash Data, like so:

$request->session()->flash('error', 'Oh no!');
// then redirect
return Redirect::route('home');

Then $request->session()->get('error'); should be available in the next request and handed off to Inertia to pass to the frontend.

[littleblue50]

Unfortunately this doesn't work either with the same result. Before the redirect happens I caught the request and confirmed the flash data IS present in the right place when I do the redirect, but the data has vanished by the time it hits HandleInertiaRequests

[littleblue50]

If anyone finds this in the future, the fix in my case after days and days of experimenting was to remove EnsureFrontendRequestsAreStateful from my middleware groups

[devleinad]

Worked for me. Thanks.

[flexchar]

Gosh I was banging my head against the wall trying to figure out why api requests are not being caught by Inertia when it shouldn't touch them at all

[rafirr]

@littleblue50 thanks for the solution! The problem is with \Illuminate\Session\Middleware\StartSession::class that is in the EnsureFrontendRequestsAreStateful.

I created a new middleware with commented StartSession and changed in middleware groups. Now everything is working :)

app/Http/Middleware/EnsureFrontendRequestsAreStateful.php

<?php

namespace App\Http\Middleware;

use Illuminate\Routing\Pipeline;
use Illuminate\Support\Collection;
use Illuminate\Support\Str;

class EnsureFrontendRequestsAreStateful
{
    /**
     * Handle the incoming requests.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  callable  $next
     * @return \Illuminate\Http\Response
     */
    public function handle($request, $next)
    {
        $this->configureSecureCookieSessions();


        return (new Pipeline(app()))->send($request)->through(static::fromFrontend($request) ? [
            function ($request, $next) {
                $request->attributes->set('sanctum', true);

                return $next($request);
            },
            config('sanctum.middleware.encrypt_cookies', \Illuminate\Cookie\Middleware\EncryptCookies::class),
            \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
            //\Illuminate\Session\Middleware\StartSession::class,
            config('sanctum.middleware.verify_csrf_token', \Illuminate\Foundation\Http\Middleware\VerifyCsrfToken::class),
        ] : [])->then(function ($request) use ($next) {
            return $next($request);
        });
    }

    /**
     * Configure secure cookie sessions.
     *
     * @return void
     */
    protected function configureSecureCookieSessions()
    {
        config([
            'session.http_only' => true,
            'session.same_site' => 'lax',
        ]);
    }

    /**
     * Determine if the given request is from the first-party application frontend.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return bool
     */
    public static function fromFrontend($request)
    {
        $domain = $request->headers->get('referer') ?: $request->headers->get('origin');

        if (is_null($domain)) {
            return false;
        }

        $domain = Str::replaceFirst('https://', '', $domain);
        $domain = Str::replaceFirst('http://', '', $domain);
        $domain = Str::endsWith($domain, '/') ? $domain : "{$domain}/";

        $stateful = array_filter(config('sanctum.stateful', []));

        return Str::is(Collection::make($stateful)->map(function ($uri) {
            return trim($uri).'/*';
        })->all(), $domain);
    }
}

app/Http/Kernel.php

'api' => [
            \App\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
            \Illuminate\Routing\Middleware\ThrottleRequests::class.':api',
            \Illuminate\Routing\Middleware\SubstituteBindings::class,
            \App\Http\Middleware\HandleInertiaRequests::class,
        ],