create separate API methods for tokens (short-lived) and personal access tokens (long-lived), include global antiforgery filter to mitigate XSRF when using cookie auth (ignored when using Jwt)
This commit is contained in:
		| @ -575,7 +575,7 @@ else | ||||
|  | ||||
| 	private async Task CreateToken() | ||||
| 	{ | ||||
| 		_token = await UserService.GetTokenAsync(); | ||||
| 		_token = await UserService.GetPersonalAccessTokenAsync(); | ||||
| 	} | ||||
|  | ||||
| 	private void ToggleClientSecret() | ||||
|  | ||||
		Reference in New Issue
	
	Block a user
	 Shaun Walker
					Shaun Walker