Control panel login broken with session driver cookie

[piedshag]

Bug description

We are getting an error 419 page expired when trying to login to the control panel, this started happening after we migrated from statamic 5 -> 6. We have been able to narrow this down to the session driver cookie.

How to reproduce

Followed the steps in the quick start guide https://statamic.dev/getting-started/quick-start-guide and created a basic app with statamic new cyberspace-place, then made a couple of changes

1. SESSION_DRIVER to cookie
2. APP_URL to localhost:8000

Tried to login with the user I created and get 419 Page Expired

Logs

No logs

Environment

Environment
Application Name: Statamic
Laravel Version: 12.53.0
PHP Version: 8.3.17
Composer Version: 2.8.3
Environment: local
Debug Mode: ENABLED
URL: localhost:8000
Maintenance Mode: OFF
Timezone: UTC
Locale: en

Cache
Config: CACHED
Events: CACHED
Routes: CACHED
Views: CACHED

Drivers
Broadcasting: log
Cache: file
Database: sqlite
Logs: stack / single
Mail: log
Queue: sync
Session: cookie

Storage
public/storage: NOT LINKED

Statamic
Addons: 0
Sites: 1
Stache Watcher: Enabled (auto)
Static Caching: Disabled
Version: 6.4.1 Solo

Installation

Fresh statamic/statamic site via CLI

Additional details

No response

[duncanmcclean]

I can't seem to replicate this. I can login fine with the cookie session driver on a fresh install:

CleanShot.2026-04-28.at.10.22.49.mp4

What are you using to host the site? php artisan serve, Laravel Herd, something else?

I've moved this to a discussion as I don't believe it's an issue with Statamic, but rather a setup/environment issue.

[piedshag]

Hi Duncan, thanks for having a look at this after upgrading my site from v6.3.3 to v6.16.0 it looks like this has been fixed. I was running the site with Apache and php-fpm.