Removing Mobile Clients from CSRF token validation #904

wgodfrey_pernix created 4 years ago

ABP Framework version: v4.2.0
UI type: MVC
DB provider: EF Core

Hi ABP,

What is the process to remove an external API client from CSRF validation. At the moment we have to disable CSRF tokens as there is no clear method in the documentation on how to filter specific by external API client etc. I've currently got the Autovalidation disabled at the HTTP API module but I'm concerned this also impacts our Web Layer.

Configure<AbpAntiForgeryOptions>(options =>
            {
                options.AutoValidate = false;
            });

Kind Regards, William Godfrey

1 Answer(s)