Layer7 API Management

  • Private Community

  • 1.  CSRF Token generation

    Posted Aug 23, 2017 08:08 AM

    Hi All,

     

    Can you please help me to configure and generate CSRF token in API gateway.

     

    Thank in advance for you are help and inputs.



  • 2.  Re: CSRF Token generation
    Best Answer

    Broadcom Employee
    Posted Aug 23, 2017 03:25 PM

    Did you happen to see the following assertion, 

     

    Protect Against Cross-Site Request Forgery Assertion - CA API Gateway - 9.2 - CA Technologies Documentation 

     

    The Protect Against Cross-Site Request Forgery assertion will set the context variable csrf.valid.token to the value of the cookie. You can use this variable later in the policy to validate the value.

     

    Thanks.