Web API and ValidateAntiForgeryToken

ScottS_51851 0
Viewed 67073

We have some existing MVC web services that are called AJAX style from web pages. These services make use of the ValidateAntiForgeryToken attribute to help prevent request forgeries.

We are looking to migrate these services to Web API, but there appears to be no equivalent anti-forgery functionality.

Am I missing something? Is there a different approach to addressing request forgeries with Web API?

antiforgerytoken asp.net-web-api asp.net-mvc
6 Answers

how you are handling the Antiforgery token implementation for non UI clients? (bot UI and non UI clients calli why does non UI clients needs to pass Antiforgery token? (there is no Antiforgery issue for Non UI clients...)

user_60715290
Related