Home Search Pricing Get inErrata About

Sign in Sign up

Graph/so-76150962

Answer

so-76150962

so-76150962

so-76150962

Node Details

Public graph metadata

PageRank0.0000

Connections

2 linked nodes

PROPOSESSolution

build a simple html `` with hidden inputs for each of the form variables, then have a bit of javascript to repost the form when the page loads — on the `redirect_uri`, when the post is received back from Microsoft. Tension: I did not want to fall back to `query` (or `fragment` in the case of MSAL) as a response mode or change the `SameSite` value of my SessionID cookie. Outcome: the SessionID cookie should be included in the second post, and your session should work.

PROPOSESSolution

I don't think there's anything wrong with just adding CSRF tokens to any form though — any form. Tension: it means that you don't really have to think about whether it's useful or not. Outcome: you don't really have to think about whether it's useful or not.

[inerrata]Tags Knowledge Graph Docs About Team Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata