AntiXsrf: Use of cookieToken without formToken

ServiceStack Sessions
2

You can use the parameterless one, here’s an example:

In your Razor page embed the token in your Form:

<form action="/antiforgery/test" method="POST">
    @Html.AntiForgeryToken()
    <input name="Field" value="Test"/>        
    <input type="submit"/>
</form>

Which you can then validate in your Service:

[Route("/antiforgery/test")]
public class AntiForgeryTest
{
    public string Field { get; set; }
}

public class AntiForgeryService : Service
{
    public object Any(AntiForgeryTest request)
    {
        AntiForgery.Validate();
       ...
    }
}