security - Is the anti-forgery token for logout necessary? -
for site pages, after being logged in few minutes, following error when attempt log out:
the anti-forgery cookie token , form field token not match.
i read in this link ways track exception down, since exception appears on logout, wonder if might easier exclude anti-forgery-token logout form altogether. idea?
i using template login page auto-generated new mvc projects.
thanks!
it advisable add token logout form, otherwise can create page posts logout page, logging out users, annoying.
Comments
Post a Comment