Question: I am trying to avoid "AntiForgery" checking as it always fails when hosted from the 3rd party server. I am using ASP.NET Core 2.0 MVC application.

I added this option in the `ConfigureServices` function:

```
services
    .AddMvc()
    .AddRazorPagesOptions( options =>
    {
        options.Conventions.AuthorizeFolder("/Account/Manage");
        options.Conventions.AuthorizePage("/Account/Logout");
        options.Conventions.ConfigureFilter(new IgnoreAntiforgeryTokenAttribute());
    } );

```

But still I am getting this exception.

> 
> System.InvalidOperationException: The antiforgery token could not be decrypted.  
> 
>  System.Security.Cryptography.CryptographicException: The key {6fb328e7-4808-4b5d-b7dc-870d126e5ca4} was not found in the key ring.
> 
> 
> 

Am I missing anything ?

Answer: 
As per my understanding you don't have to disable any thing.
 By default if you use asp net tag helper to create form element it will put anti forgery token 

It is upto you to validate anti forgery token by the use [ValidateAntiforgeryToken] annotation in action method or globally define configuration to ValidateAntiforgeryToken which will make system to try validate anti forgery token 

If you have not configured system as mentioned about the system won't validate anti forgery token and won't be problem for your situation
In case anyone else struggles with this in NET 6;

```
services.AddAntiforgery(options => { options.SuppressXFrameOptionsHeader = true; });

```