User

Get a live same-origin CSRF token

Returns the token for the caller's current browser session and whether it is authenticated. The response is private and never cacheable.

get/api/v1/csrf

Response

Session CSRF state

csrfstring

logged_inboolean

Changed in 1 of the 3 revisions of this API.1

Jul 26, 2026996f96a117581See the full diff
- ○
  endpoint added
  endpoint-added
This revision also has 1 change that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog