Tag Info

Hot answers tagged

1

Yes, there's no problem with using the same CSRF token since it is already sharing the same auth token. As long as the token is regenerated per new session and both the API and the APP check that the CSRF token is associated with that particular session then this should mitigate CSRF.



Only top voted, non community-wiki answers of a minimum length are eligible