<p>Each session gets it's own CSRF token, so technically it will be valid as long as a session is valid.</p>

CC BY-SA 3.0
2017-02-06T10:39:08.413Z
2017-02-06T10:39:08.413Z
Fred Carlsen
<p>I did at some point believe that the CSRF token my plugin requests was using expired in the middle of a request, but it turns out that they were never included in the first place.</p>

<p>Still curious, I wonder how long a CSRF token lasts?</p>

<plugin-development><security>
How long does a CSRF token lasts?
# How long does a CSRF token lasts?

(Asked by: username_0 on 2017-02-06)

I did at some point believe that the CSRF token my plugin requests was using expired in the middle of a request, but it turns out that they were never included in the first place.

Still curious, I wonder how long a CSRF token lasts?

**Tags:** plugin-development, security

---

## 1 answers

### Answer by username_0 on 2017-02-06. Score: 3 | Accepted answer

Each session gets it's own CSRF token, so technically it will be valid as long as a session is valid.


---

