Invalid CSRF token Archives

How to add X-XSRF-TOKEN header to Postman requests

5th February 20226th February 2022 little_pineconeTools

When an API is secured against CSRF attacks, we must ensure that our clients’ requests are adjusted to the security requirements. Learn how to successfully call an API that uses the Cookie-to-header token approach by adding the X-XSRF-TOKEN header to Postman requests.

Fix “Invalid CSRF token” error – add the XSRF-TOKEN header in Angular

3rd August 20203rd August 2020 little_pineconeAngular

Angular provides a built-in support for sending requests secured with the XSRF-TOKEN header. However, it won’t add the token to absolute URLs for security reasons. One way to solve the “Invalid CSRF token found” issue is to use relative links in all mutable requests and apply a custom proxy.