Question About token request

Now we can see that many websites carry a token parameter in asynchronous requests. What is the purpose of this parameter? This parameter should be generated by the server. Shouldn't it expire after my asynchronous request? What should I do next asynchronous request? Thank you.

Now we can see that many websites carry a token parameter in asynchronous requests. What is the purpose of this parameter? This parameter should be generated by the server. Shouldn't it expire after my asynchronous request? What should I do next asynchronous request? Thank you.

Reply content:

Now we can see that many websites carry a token parameter in asynchronous requests. What is the purpose of this parameter? This parameter should be generated by the server. Shouldn't it expire after my asynchronous request? What should I do next asynchronous request? Thank you.

Token can effectively prevent malicious submission and software submission. For example, a resource id may be input during a delete operation. Adding token can effectively prevent the traversal id from being deleted and must be deleted by normal access, token is a solution for csrf. the token is randomly generated and can be written to the client cookie. the token is destroyed after verification. A new token is generated on the form page next time!

Token is only a parameter and has no fixed purpose.
It may be used to identify the uniqueness of a session or an asynchronous request.