csrf hackyness

app.js

document.addEventListener("DOMContentLoaded", function () {

  setInterval(keepTokenAlive, 1000 * 60 * 15); // every 15 mins

  function keepTokenAlive() {
    axios.get('/keep-token-alive')
         .then(response => {
            let token = response.data.token;
            window.axios.defaults.headers.common['X-CSRF-TOKEN'] = response.data.token;
            const formFields = document.querySelectorAll('input[name="_token"]');
            Array.from(formFields).forEach(field => {
              field.value = token;
            });
         })
         .catch(error => {
           console.log(error);
         });
  }
});

routes-web

Auth::routes();

Route::get('/keep-token-alive', function () {
    return ['token' => csrf_token()];
});