Angular 4 version and AntiForgery tokens #3429

joe704la created 7 years ago

Is the Angular 4 version setup to send Antiforgery token with the PUTs, POSTs, and DELETEs? I was watching the posts in the dev tools and I do not see any Antiforgery token.

5 Answer(s)

0

joe704la created 7 years ago

Does anyone have any ideas on this one?
0

ismcagdas created 7 years ago
Support Team

Hi,

Angular 4 does not set anti-forgery tokens because it is not needed. Angular4 client and host application are two different applications.

Why do you need it ? Can you explain a bit more ? Maybe we can offer you something.

Thanks.
0

joe704la created 7 years ago

Basically I wanted to make sure nothing else was making requests to the API but the Angular app.
0

ismcagdas created 7 years ago
Support Team

Hi,

This is done with Cors setting. You can only allow specific url's to make request to your API.

If you want to block non browser apps, you should do it manually I think.

Thanks.
0

joe704la created 6 years ago

Okay great, thank you

Have an answer to this question? Log in and write your answer.