Issue a CSRF token for browser mutating requests
curl --request GET \
--url https://api.acornops.dev/api/v1/auth/csrfconst options = {method: 'GET'};
fetch('https://api.acornops.dev/api/v1/auth/csrf', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"csrfToken": "<string>"
}{
"error": {
"code": "<string>",
"message": "<string>",
"retryable": true,
"details": {}
}
}{
"error": {
"code": "<string>",
"message": "<string>",
"retryable": true,
"details": {}
}
}{
"error": {
"code": "<string>",
"message": "<string>",
"retryable": true,
"details": {}
}
}{
"error": {
"code": "<string>",
"message": "<string>",
"retryable": true,
"details": {}
}
}{
"error": {
"code": "<string>",
"message": "<string>",
"retryable": true,
"details": {}
}
}{
"error": {
"code": "<string>",
"message": "<string>",
"retryable": true,
"details": {}
}
}{
"error": {
"code": "<string>",
"message": "<string>",
"retryable": true,
"details": {}
}
}Auth and users
Issue a CSRF token for browser mutating requests
Issue a CSRF token for browser mutating requests
curl --request GET \
--url https://api.acornops.dev/api/v1/auth/csrfconst options = {method: 'GET'};
fetch('https://api.acornops.dev/api/v1/auth/csrf', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));{
"csrfToken": "<string>"
}{
"error": {
"code": "<string>",
"message": "<string>",
"retryable": true,
"details": {}
}
}{
"error": {
"code": "<string>",
"message": "<string>",
"retryable": true,
"details": {}
}
}{
"error": {
"code": "<string>",
"message": "<string>",
"retryable": true,
"details": {}
}
}{
"error": {
"code": "<string>",
"message": "<string>",
"retryable": true,
"details": {}
}
}{
"error": {
"code": "<string>",
"message": "<string>",
"retryable": true,
"details": {}
}
}{
"error": {
"code": "<string>",
"message": "<string>",
"retryable": true,
"details": {}
}
}{
"error": {
"code": "<string>",
"message": "<string>",
"retryable": true,
"details": {}
}
}Response
Signed CSRF token. The same value is also set in a readable SameSite cookie.