I am passing token in all the headers but it only works for login, after that for all requests it says "Token Expired"
Token Setup :
Output in Result tree :
Also when I look at my website, I can see 2 tokens :
<!-- CSRF Token -->
<meta name="csrf-token" content="AqrfjMcG1adWWDlx8YYkYqOCy3Mwp7fRynwut222">
<input type="hidden" name="_token" value="AqrfjMcG1adWWDlx8YYkYqOCy3Mwp7fRynwut222">
So I am passing _token for all request headers as above both has same content/value.
I am also not sure about x-socket-id
, It came be default as I recorded script. is it ok to remove it?
via Chebli Mohamed
Aucun commentaire:
Enregistrer un commentaire