A CSRF Token is a secret, unique and unpredictable value a server-side application generates in order to protect CSRF vulnerable resources. The tokens are generated and submitted by the server-side application in a subsequent HTTP request made by the client.

How do I get XSRF tokens?

To obtain the XSRF token, the client has to use a non-modifying HTTP method containing header X-CSRF-Token with the value Fetch . The token is issued only if the user has already been authenticated. If the user has not been authenticated , any request with a modifying method is rejected by this filter.

How do I fix CSRF token mismatch?

1. Open Chrome Settings.
2. Scroll to the bottom and click on Advanced.
3. In the Privacy and Security section, click the Content Settings button.
4. Click on Cookies.
5. Next to Allow, click Add. …
6. Under All cookies and site data, search for Ucraft, and delete all Ucraft-related entries.
7. Reload Chrome and log into Ucraft.