Can AntiForgeryToken be used in a Javascript Post?

Question

if so can show simple example, ex in jquery ajax.post

Answer 1

The cookie should be sent back with the request so if you serialize the input it should work.

$('form').submit( function() {
    $.post( $(this).action, $(this).serialize(), function(data) {
         ... do something with result
    }, 'json');
    return false; // prevent default submission
});

The key is to make sure that the data that you pass back to the server contains the hidden antiforgery token input. In the case of the example above the antiforgery token must be included inside the form for it to work.

<% using (Html.BeginForm()) { %>
    <%= Html.AntiForgeryToken() %>
    ....
<% } %>