csurf and passwordless

Open cookie-ag opened this issue 9 years ago • 3 comments

Hi,

I am a bit new to the concept of csurf and was wondering if using csurf makes sense while using passwordless. I read that jwt doesn't have to use csurf but since passwordless has sessionSupport() I have to ask about it?

Jun 03 '16 04:06 cookie-ag

any feedbacks appreciated

Sep 12 '16 15:09 cookie-ag

Sounds like you answered your question actually!

Jun 27 '17 01:06 NetOpWibby

Can you clarify ? :-)

Jun 27 '17 03:06 cookie-ag