Skip to content
This repository has been archived by the owner on Jun 29, 2023. It is now read-only.

Help Wanted: C# HttpClient tracks and sends cookies even if you don't ask it to #467

Open
amyblais opened this issue Aug 13, 2019 · 0 comments
Labels
Help Wanted Community help wanted

Comments

@amyblais
Copy link
Member

Logging in with a username and password returns an MMCSRF cookie. This cookie has to be included in an X-CSRF-Token header on all subsequent requests (except GET, which is allowed, for some reason). This should be made more clear in API documentation.

Original report: mattermost/mattermost#11590 (comment)

@amyblais amyblais added the Help Wanted Community help wanted label Aug 13, 2019
@cwarnermm cwarnermm changed the title C# HttpClient tracks and sends cookies even if you don't ask it to Help Wanted: C# HttpClient tracks and sends cookies even if you don't ask it to Feb 25, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Help Wanted Community help wanted
Projects
None yet
Development

No branches or pull requests

4 participants