PreviousNext

Anti-forgery token and anti-forgery cookie related issues

by bill-s, 2019-11-06T17:43:00.825Z

Anti-forgery token is used to prevent CSRF (Cross-Site Request Forgery) attacks. Here is how it works in high-level: IIS server associates this token with the current user’s identity before sending it to the client In the next client request, the server expects to see this token If the token is missing or it is different, then the server rejects the request (Reference)

Read More