This repository has been archived by the owner on Jun 29, 2023. It is now read-only.
Help Wanted: C# HttpClient tracks and sends cookies even if you don't ask it to #467
Labels
Help Wanted
Community help wanted
Logging in with a username and password returns an MMCSRF cookie. This cookie has to be included in an X-CSRF-Token header on all subsequent requests (except GET, which is allowed, for some reason). This should be made more clear in API documentation.
Original report: mattermost/mattermost#11590 (comment)
The text was updated successfully, but these errors were encountered: