mattermost-api-reference
mattermost-api-reference copied to clipboard
Help Wanted: C# HttpClient tracks and sends cookies even if you don't ask it to
Logging in with a username and password returns an MMCSRF cookie. This cookie has to be included in an X-CSRF-Token header on all subsequent requests (except GET, which is allowed, for some reason). This should be made more clear in API documentation.
Original report: https://github.com/mattermost/mattermost-server/issues/11590#issuecomment-514958365