Maybe a stupid question, but why does the csrfSecret always change ? If a request does not behave as it should, firstly it will use my validation and then it will always give 'Invalid csrf token', only if I refresh the page it will work.
I'd like it to leave the secret as it is, because it should be unique, imo.
Any solutions ? Thanks !
Maybe a stupid question, but why does the csrfSecret always change ? If a request does not behave as it should, firstly it will use my validation and then it will always give 'Invalid csrf token', only if I refresh the page it will work.
I'd like it to leave the secret as it is, because it should be unique, imo.
Any solutions ? Thanks !