I want to check that whether a request hit by an user is actually hit by the same user. For that can I check whether the session cookie and the csrf token are for that user. If there is any mismatch in it I want the abort the request

  • It sounds like you have a plan. Please make a coding attempt, then show us the earliest point where you get stuck. Then we can offer you very articulate support. I see that you haven't yet registered your account or earned your Informed badge. Please complete your registration, take the tour, consider a personalised screen name, and perhaps tell us a little about you in your profile. – mickmackusa Nov 20 '19 at 10:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.