This repository was archived by the owner on Jun 29, 2023. It is now read-only.
This repository was archived by the owner on Jun 29, 2023. It is now read-only.
Help Wanted: C# HttpClient tracks and sends cookies even if you don't ask it to #467
Description
Logging in with a username and password returns an MMCSRF cookie. This cookie has to be included in an X-CSRF-Token header on all subsequent requests (except GET, which is allowed, for some reason). This should be made more clear in API documentation.
Original report: mattermost/mattermost#11590 (comment)