wip

Altinn · Jan 28, 2025 · 030a76b · 030a76b
1 parent 0364dd7
commit 030a76b
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/src/Altinn.App.Api/Controllers/HomeController.cs b/src/Altinn.App.Api/Controllers/HomeController.cs
@@ -74,6 +74,20 @@ public async Task<IActionResult> Index(
         [FromQuery] bool dontChooseReportee
     )
     {
+        // See comments in the configuration of Antiforgery in MvcConfiguration.cs.
+        var tokens = _antiforgery.GetAndStoreTokens(HttpContext);
+        if (tokens.RequestToken != null)
+        {
+            HttpContext.Response.Cookies.Append(
+                "XSRF-TOKEN",
+                tokens.RequestToken,
+                new CookieOptions
+                {
+                    HttpOnly = false, // Make this cookie readable by Javascript.
+                }
+            );
+        }
+
         if (await ShouldShowAppView())
         {
             ViewBag.org = org;