drupal/core/modules/rest/rest.routing.yml

# @deprecated This route is deprecated, use the system.csrftoken route from the
# system module instead.
# @todo Remove this route in Drupal 9.0.0.
rest.csrftoken:
  path: '/rest/session/token'
  defaults:
    _controller: '\Drupal\system\Controller\CsrfTokenController::csrfToken'
  requirements:
    _access: 'TRUE'
Issue #2753681 by tedbow, Wim Leers, dawehner, neclimdul, catch: Move CSRF header token out of REST module so that user module can use it, as well as any contrib module 2016-07-25 12:47:47 +00:00			`# @deprecated This route is deprecated, use the system.csrftoken route from the`
			`# system module instead.`
			`# @todo Remove this route in Drupal 9.0.0.`
Issue #1891052 by klausi: Fixed Protect write operations from CRSF by requiring an token (when using cookie/session-based authentication). 2013-01-30 03:35:10 +00:00			`rest.csrftoken:`
Issue #2051097 follow-up by tim.plunkett: Remove silly spacing errors. 2013-09-16 05:06:19 +00:00			`path: '/rest/session/token'`
Issue #1891052 by klausi: Fixed Protect write operations from CRSF by requiring an token (when using cookie/session-based authentication). 2013-01-30 03:35:10 +00:00			`defaults:`
Issue #2753681 by tedbow, Wim Leers, dawehner, neclimdul, catch: Move CSRF header token out of REST module so that user module can use it, as well as any contrib module 2016-07-25 12:47:47 +00:00			`_controller: '\Drupal\system\Controller\CsrfTokenController::csrfToken'`
Issue #1891052 by klausi: Fixed Protect write operations from CRSF by requiring an token (when using cookie/session-based authentication). 2013-01-30 03:35:10 +00:00			`requirements:`
			`_access: 'TRUE'`