October 25, 2026
Protect Cookie-Based Internal APIs from CSRF
Authentication identifies a signed-in administrator; authorization and anti-forgery checks protect each mutation.
TOPIC
Security
Authentication, authorization, cookies, CSRF, and API safety.