postCsrfAdmin BFF

/bff/csrf/create

Returns a 16-character CSRF token that must be included in the body of subsequent unauthenticated form submissions (login, signup, recovery). Tokens expire after 30 minutes and are consumed on first successful verify.

CsrfpostBffCsrfCreate

Parameters

JSON body

Request body

application/json

Empty object · no documented properties.

Response schema

1 status code documented

200Success

tokenstringRequired

16-character one-shot token.

Exampleab3c9de1f2h4j5k6

expiresAtstringRequired

ISO-8601 timestamp at which the token stops being accepted.

Example2026-09-01T12:30:00.000Z

Response example

application/json

{
  "token": "ab3c9de1f2h4j5k6",
  "expiresAt": "2026-09-01T12:30:00.000Z"
}

Request example

POST /bff/csrf/create

post

curl -X POST "https://api.bizkithub.com/bff/csrf/create" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -d '{}'

Need an API key?

All BizKitHub public API endpoints require authentication via API key.

Get API Key