title: XSRF antiforgery: Asp.Net Core 2 WebApi (not MVC) + separate Server for Angular is possible?
body: <p>I'm using Asp.Net Core Webapi 2 with no static content as a backend server +
  nginx on a separate machine to serve Angular 7 application.
  Here is the question: does it have sence to try to use xrsf antiforgery protection like 
  <code>services.AddAntiforgery(options =&gt; options.HeaderName = "X-XSRF-TOKEN");</code>
  in case of splitted back and front machines?
  As far as I understand I have to manage some kind of state between these two servers to provide corresponding cookie from Nginx which backend server will accept.</p>