Laravel向数据库存储数据时出现方法类型错误如何解决？

问题相关信息 #

1. API路由定义 #

Route::post('/orderdetails/store/', 'App\Http\Controllers\ApiOrderDetailController@store');

2. 控制器处理代码 #

public function store(Request $request)
{
    $validator = Validator::make($request->all(), [
        'order_id' => 'required',
        'product_id' => 'required'
    ]);

    if ($validator->fails()) {
        $errors = $validator->errors();
        return response()->json($errors);
    }

    $order_id = $request->order_id;
    $product_id = $request->product_id;
    $order_details = OrderDetail::create(['order_id' => $order_id, 'product_id' => $product_id]);

    $success = 'Order Details Confirmed Successfully';

    return response()->json($success);
}

3. Postman报错截图 #

4. 完整api.php路由配置 #

<?php

use Illuminate\Http\Request;
use Illuminate\Support\Facades\Route;

Route::get('/subscribtions', 'App\Http\Controllers\ApiSubscribtionController@index');

Route::post('/handle-login', 'App\Http\Controllers\ApiAuthController@handleLogin');
Route::post('/handle-register', 'App\Http\Controllers\ApiAuthController@handleRegister');

Route::get('/brands', 'App\Http\Controllers\ApiBrandController@index');
Route::post('/add-brand', 'App\Http\Controllers\ApiBrandController@store');

Route::post('/products/store', 'App\Http\Controllers\ApiProductController@store');
Route::get('/products/delete/{id}', 'App\Http\Controllers\ApiProductController@delete');
Route::get('/brands/delete/{id}', 'App\Http\Controllers\ApiBrandController@delete');
Route::post('/brands/update/{id}', 'App\Http\Controllers\ApiBrandController@update');
Route::post('/products/update/{id}', 'App\Http\Controllers\ApiProductController@update');
Route::get('/products/{brand?}', 'App\Http\Controllers\ApiProductController@index');
Route::get('/products/arrivals', 'App\Http\Controllers\ApiProductController@arrivals');
Route::get('/products/more/{brand}', 'App\Http\Controllers\ApiProductController@more');
Route::get('/products/show/{id}', 'App\Http\Controllers\ApiProductController@show');

Route::post('/order/store', 'App\Http\Controllers\ApiOrderController@store');
Route::post('/orderdetails/store/', 'App\Http\Controllers\ApiOrderDetailController@store');

Route::middleware('is.admin')->group(function () {
    Route::post('/subscribtions/store', 'App\Http\Controllers\ApiSubscribtionController@store');
    
    Route::post('/handle-logout', 'App\Http\Controllers\ApiAuthController@handleLogout');
});

报错原因 #

从截图的419状态码可以定位是CSRF令牌校验失败，触发原因有两个核心可能：

• Laravel默认api.php定义的路由会自动加/api前缀，若Postman请求时遗漏该前缀，请求会命中web路由组，触发web组默认的CSRF校验逻辑，直接返回419错误。
• 若你修改过框架默认的中间件配置，api路由组没有被排除在VerifyCsrfToken校验范围外，也会触发该报错。
• 额外注意：即使解决419问题后如果仍然报错，要检查OrderDetail模型的$fillable属性是否添加了order_id和product_id，否则create批量赋值会抛出字段不可写的错误。

解决方法 #

1. 修正请求地址：Postman中请求的地址改为http://你的项目域名/api/orderdetails/store/，不要遗漏/api前缀。
2. 若修正地址后仍然报419，打开app/Http/Middleware/VerifyCsrfToken.php，将接口路由加入排除校验列表：

protected $except = [
    '/api/orderdetails/store',
    // 其他需要排除CSRF校验的接口可以依次加在这里
];

3. 配置模型可写字段：打开app/Models/OrderDetail.php，配置$fillable属性允许批量赋值对应字段：

protected $fillable = [
    'order_id',
    'product_id',
    // 其他需要批量写入的字段也加在这里
];

内容的提问来源于stack exchange，提问作者Osama Amr