- Issue created by @fago
- 🇦🇹Austria fago Vienna
I think this is not really a bug now, because there are ways to work around it.
I came up with a simple one. Use the account-menu, which at least in standard profile, is there and provides us with working login/logout links. The logout link already contains the right token. api response for testing: /api/menu_items/account
- 🇦🇹Austria fago Vienna
unfortunately the logout link token has some issues also, see 🐛 Wrong user logout CSRF token Active
- 🇦🇹Austria fago Vienna
I think this is not important, since generally it's better to make CSRF-token protected links work properly. The confirm-form we could make work, but including the redirect to the form, it's gonna be some additional work that might not be worth it.