---
title: "Get the CSRF token bound to the current session"
method: GET
path: "/auth/csrf"
tags: ["Auth"]
---

# Get the CSRF token bound to the current session

`GET /auth/csrf`

## Request

- Base URL: `https://api.flashdata.dev/v2`
- URL: `https://api.flashdata.dev/v2/auth/csrf`
- Auth: API key in cookie `__Host-fd_session`

## Response `200`

CSRF token

- object
  - `csrfToken` string, required

## Other responses

- `401`: Authentication required or invalid

---

[API](https://skmtc.dev/flashdata/apis/flashdata-customer-api.md) · [All operations](https://skmtc.dev/flashdata/apis/flashdata-customer-api/llms.txt) · [OpenAPI document](https://skmtc.dev/flashdata/apis/flashdata-customer-api/revisions/109179fe9313?raw)