User

Get a live same-origin CSRF token

Changed on

Returns the token for the caller's current browser session and whether it is authenticated. The response is private and never cacheable.

get/api/v1/csrf

Request

Response

Session CSRF state

csrfstring
logged_inboolean

Changes