title: Anti-Forgery Token + Web API (- MVC)
body: <p>How to use Anti-Forgery Token With ASP.NET Web API without ASP.NET MVC?</p>
  
  <p>Stephen Walther has this article of "Preventing Cross-Site Request Forgery Attacks with ASP.NET MVC" in <a href="http://stephenwalther.com/archive/2013/03/05/security-issues-with-single-page-apps">http://stephenwalther.com/archive/2013/03/05/security-issues-with-single-page-apps</a> ... but his solution includes MVC/Razor and in my front-end I don't planning to include it. And there are abundance articles like it, which the solution is adding <code>@Html.AntiForgeryToken()</code> but this cannot be my solution.</p>
  
  <p>Later, I solved another issue, "the Same Origin policy": <a href="http://www.asp.net/web-api/overview/security/enabling-cross-origin-requests-in-web-api">http://www.asp.net/web-api/overview/security/enabling-cross-origin-requests-in-web-api</a>, Could this be the solution to prevent the CSRF as well? I don't think so.</p>