create separate API methods for tokens (short-lived) and personal access tokens (long-lived), include global antiforgery filter to mitigate XSRF when using cookie auth (ignored when using Jwt)
This commit is contained in:
@ -575,7 +575,7 @@ else
|
||||
|
||||
private async Task CreateToken()
|
||||
{
|
||||
_token = await UserService.GetTokenAsync();
|
||||
_token = await UserService.GetPersonalAccessTokenAsync();
|
||||
}
|
||||
|
||||
private void ToggleClientSecret()
|
||||
|
Reference in New Issue
Block a user