Question:145804

will this code work if I use this is my startup

var antiforgery = app.ApplicationServices.GetRequiredService<IAntiforgery>();

app.Use((context, next) => { var requestPath = context.Request.Path.Value;

if (string.Equals(requestPath, "/", StringComparison.OrdinalIgnoreCase) || string.Equals(requestPath, "/index.html", StringComparison.OrdinalIgnoreCase)) { var tokenSet = antiforgery.GetAndStoreTokens(context); context.Response.Cookies.Append("XSRF-TOKEN", tokenSet.RequestToken!, new CookieOptions { HttpOnly = false }); }

return next(context); });