Initialize CSRF protection

GET

/api/v1/auth/csrf

• Generated server url

Initializes the XSRF-TOKEN cookie and returns the framework header and parameter names. Call this public endpoint before protected state-changing requests.

Responses

200

CSRF contract initialized

CSRF bootstrap values issued by Spring Security.

object

headerName

HTTP header name expected on protected mutations.

string

Example

X-XSRF-TOKEN

parameterName

Framework request parameter name.

string

token

Opaque CSRF value that must match the XSRF-TOKEN cookie.

string

500

The server could not complete the request.

RFC 7807 problem response. Dynamic detail text is credential-redacted.

object

detail

string

instance

string format: uri-reference

status

integer format: int32

title

string

type

string format: uri-reference