#stateless-architecture

CSRF is Dead, Long Live Request Intent: The Anatomy of a Cryptographic Primitive

The "Synchronizer Token Pattern"—the standard approach to CSRF protection for the last decade—is becoming an architectural liability.