Answers.Body: <p>Each session gets it's own CSRF token, so technically it will be valid as long as a session is valid.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2017-02-06T10:39:08.413Z
Answers.LastActivityDate: 2017-02-06T10:39:08.413Z
Answers.UserDisplayName: Fred Carlsen
Body: <p>I did at some point believe that the CSRF token my plugin requests was using expired in the middle of a request, but it turns out that they were never included in the first place.</p>
  
  <p>Still curious, I wonder how long a CSRF token lasts?</p>
  
Tags: <plugin-development><security>
Title: How long does a CSRF token lasts?
ThreadText: # How long does a CSRF token lasts?
  
  (Asked by: username_0 on 2017-02-06)
  
  I did at some point believe that the CSRF token my plugin requests was using expired in the middle of a request, but it turns out that they were never included in the first place.
  
  Still curious, I wonder how long a CSRF token lasts?
  
  **Tags:** plugin-development, security
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_0 on 2017-02-06. Score: 3 | Accepted answer
  
  Each session gets it's own CSRF token, so technically it will be valid as long as a session is valid.
  
  
  ---
  
  