Found and fixed #1571

resources/assets/js/components/passport/Clients.vue

@@ -288,7 +288,7 @@
              */
             store() {
                 this.persistClient(
-                    'post', './oauth/clients',
+                    'post', './oauth/clients' + '?_token=' + window.Laravel,
                     this.createForm, '#modal-create-client'
                 );
             },
@@ -309,7 +309,7 @@
              */
             update() {
                 this.persistClient(
-                    'put', './oauth/clients/' + this.editForm.id,
+                    'put', './oauth/clients/' + this.editForm.id + '?_token=' + window.Laravel,
                     this.editForm, '#modal-edit-client'
                 );
             },

resources/assets/js/components/passport/PersonalAccessTokens.vue

@@ -238,7 +238,7 @@
 
                 this.form.errors = [];
 
-                axios.post('./oauth/personal-access-tokens', this.form)
+                axios.post('./oauth/personal-access-tokens?_token=' + window.Laravel, this.form)
                         .then(response => {
                             this.form.name = '';
                             this.form.scopes = [];

resources/views/layout/default.twig

@@ -156,6 +156,9 @@
         </div>
     </div>
 </div>
+<script type="text/javascript">
+    window.Laravel = "{{ csrf_token()  }}";
+</script>
 <script src="js/lib/moment.min.js?v={{ FF_VERSION }}" type="text/javascript"></script>
 <script src="js/ff/moment/{{ language }}.js?v={{ FF_VERSION }}" type="text/javascript"></script>
 <script src="{{ route('javascript.variables') }}?ext=.js&amp;v={{ FF_VERSION }}{% if account %}&amp;account={{ account.id }}{% endif %}" type="text/javascript"></script>