Lets assume that i have create website which in every request to API lets say send JWT token and CSRF token. So let's create case like that:
I'm logged in to user A and make ajax request to API with JWT and CSRF token. I go to networking and read this tokens and copy them.
Next i go to eg another server or injecting progam and inject this JWT and CSRF token. Will i will be able to recieve data ? If yes/no why ? I need to add that cors is disabled
Looking forward for replies. Thank You very much and regards