| CSRF via http header? |
(10-01-2018, 02:55 AM)puschie Wrote: but the idea is good - we should support header-csrf tokens for better compatibility. its used by many front end frameworks I have been working with Angular, Vuejs and React for a long time and I always manage authorization with tokens using Bearer, usually with JWT, never with CSRF, but it is my experience. The reason is that it is a standard applicable to any project and does not depend on the Framework. |
| Messages In This Thread |
|
CSRF via http header? - by albertleao - 09-30-2018, 10:56 PM
RE: CSRF via http header? - by scalla - 09-30-2018, 11:25 PM
RE: CSRF via http header? - by unodepiera - 09-30-2018, 11:44 PM
RE: CSRF via http header? - by puschie - 10-01-2018, 02:55 AM
RE: CSRF via http header? - by unodepiera - 10-01-2018, 03:01 AM
|
