Filament•5mo ago

Invalid Route Signature: Password Reset

I have placed our CMS on a subdomain and filament does work perfectly fine except signed route url always throw invalid signature. What did I missed here?

private function mergeForceHttps(): void
    {
        if ($this->app->environment(['staging', 'production'])) {
            URL::forceScheme('https');
        }
    }

private function mergeForceHttps(): void
    {
        if ($this->app->environment(['staging', 'production'])) {
            URL::forceScheme('https');
        }
    }

12 Replies

Dennis Koch•5mo ago

The link is created for the subdomain right? And you aren't redirected when accessing the URL?

SidjiOP•5mo ago

I was redirect on the link but it was invalid. I think this is not filament related issue. I just tested it with my api routes and the same issue

bardolf_6969•5mo ago

Is your route being passed through a proxy/load balancer/etc.? If so you may need to set it as trusted - https://laravel.com/docs/11.x/requests#configuring-trusted-proxies

Laravel - The PHP Framework For Web Artisans

Laravel is a PHP web application framework with expressive, elegant syntax. We’ve already laid the foundation — freeing you to create without sweating the small things.

Dennis Koch•5mo ago

If you are being redirected the URL doesn't match with the signature anymore

SidjiOP•5mo ago

@bardolf_6969 Yep. I have already configures my TrustProxies.

SidjiOP•5mo ago

@Dennis Koch what do you mean by redirection? is it not the default should it come from another link?

Dennis Koch•5mo ago

When you visit the signed URL are you redirected? Or are you on the final page?

SidjiOP•5mo ago

yes on the final page. thats the default Haven't change anything.

bardolf_6969•5mo ago

Are you using laralve 11 or earlier?

SidjiOP•5mo ago

I am using Laravel 10. my api works fine and its domain is api.staging.mysite.com.au . but for our CMS. cms.staging.mysite.com.au forgot password does not work.

SidjiOP•5mo ago

And I also have a custom route on web.php which has domain which also does not work.

SidjiOP•5mo ago

Thank you guys. But the issue was solved. I have to configure the AWS ELB to allow https only.

Gaming

Programming

Invalid Route Signature: Password Reset