blocks|key|190505|text|在您的操作之前，您具有[ValidateAntiForgeryToken]属性。您还应该在表单中添加@Html.AntiForgeryToken()。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|190506|entityMap^0|B|Q|1E|O|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]|$9|K|A|L|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|M|8|@]|D|@]|E|$]]]|G|$]]

You have <code>[ValidateAntiForgeryToken]</code> attribute before your action. You also should add <code>@Html.AntiForgeryToken()</code> in your form.

blocks|key|2811997|text|如下所示：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2811998|控制器|2811999|[HttpPost]
[ValidateAntiForgeryToken]
public+ActionResult+MethodName(FormCollection+formCollection)
{
+++++...
+++++Code+Block
+++++...
}|code-block|syntax|javascript|2812000|视图：|2812001|@using(Html.BeginForm())
{
+++++@Html.AntiForgeryToken()
+++++<input+name="..."+type="text"+/>
+++++//+rest
}|2812002|entityMap^0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|P|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|Q|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|R|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|S|8|@]|9|@]|A|$G|H]]|$1|M|3|-4|5|6|7|T|8|@]|9|@]|A|$]]]|N|$]]

Like this:

<h2>The Controller</h2>

<pre><code>[HttpPost]
[ValidateAntiForgeryToken]
public ActionResult MethodName(FormCollection formCollection)
{
 ...
 Code Block
 ...
}
</code></pre>

<h2>The View:</h2>

<pre><code>@using(Html.BeginForm())
{
 @Html.AntiForgeryToken()
 &lt;input name="..." type="text" /&gt;
 // rest
}
</code></pre>

blocks|key|2812008|text|还要确保避免在HttpGet下使用ValidateAntiForgeryToken。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2812009|++[HttpGet]
++public+ActionResult+MethodName()
++{
++..
++}|code-block|syntax|javascript|2812010|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Also make sure avoid not use [ValidateAntiForgeryToken] 
under [HttpGet].

<pre><code> [HttpGet]
 public ActionResult MethodName()
 {
 ..
 }
</code></pre>

blocks|key|3024719|text|即使没有启用Cookie，您也会收到该错误。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3024720|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

You will receive the error even when Cookies are not enabled.

blocks|key|3024722|text|在我的例子中，我的web.config中有以下内容：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3024723|<httpCookies+requireSSL="true"+/>|offset|length|style|CODE|3024724|但是我的项目被设置为不使用SSL。注释掉这一行或将项目设置为始终使用SSL解决了这个问题。|3024725|entityMap^0|0|0|X|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|M|8|@$D|N|E|O|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|P|8|@]|9|@]|A|$]]|$1|J|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|K|$]]

In my case, I had this in my web.config:

<code>&lt;httpCookies requireSSL="true" /&gt;</code>

But my project was set to not use SSL. Commenting out that line or setting up the project to always use SSL solved it.

blocks|key|2812080|text|另一件可能导致这种情况的事情是:如果您出于某种原因禁用了表单中的所有输入域。它将禁用包含您的验证令牌的隐藏输入字段。当表单将被回发时，令牌值将丢失，并将生成丢失的错误。因此，您需要做的是重新启用包含验证令牌的输入字段，一切都将正常。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2812081|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

Another thing that can cause this (just ran into this) is the following:
if you for some reason disable all your input fields in your form.
it will disable the hidden input field that holds your verification token.
when the form will be posted back the token value will be missing and will generate the error that it is missing. so what you need to do is to re-enable the input field that holds the verification token and all will be well.

blocks|key|193110|text|在我的例子中，cookies在web.config中的域不正确是原因：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|193111|<httpCookies+domain=".wrong.domain.com"+/>|code-block|syntax|javascript|193112|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

In my case incorrect domain in web.config for cookies was the reason:

<pre><code>&lt;httpCookies domain=".wrong.domain.com" /&gt;
</code></pre>

blocks|key|3024920|text|如果任何人因为和我一样的原因遇到这个错误，这是我的解决方案：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3024921|如果你有Html.AntiForgeryToken();|offset|length|style|CODE|3024922|将其更改为@Html.AntiForgeryToken()|3024923|entityMap^0|0|4|O|0|5|O|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|M|8|@$D|N|E|O|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|P|8|@$D|Q|E|R|F|G]]|9|@]|A|$]]|$1|J|3|-4|5|6|7|S|8|@]|9|@]|A|$]]]|K|$]]

If anyone experiences the error for the same reason why I experience it, here's my solution:

if you had <code>Html.AntiForgeryToken();</code> 

change it to <code>@Html.AntiForgeryToken()</code>

blocks|key|191020|text|确保在您的控制器中具有如下的http属性：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|191021|[HttpPost]|code-block|syntax|javascript|191022|还要在控制器中添加属性：|191023|[ValidateAntiForgeryToken]|191024|在视图的表单中，您必须写下：|191025|@Html.AntiForgeryToken();|191026|我有Html.AntiForgeryToken()；在代码块中没有@符号，它在Razor中不会给出错误，但在运行时会给出错误。确保您看到@Html.Ant的@符号..如果它丢失或不是|offset|length|style|BOLD|191027|entityMap^0|0|0|0|0|0|0|1R|S|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|X|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Y|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|Z|8|@]|9|@]|A|$E|F]]|$1|K|3|L|5|6|7|10|8|@]|9|@]|A|$]]|$1|M|3|N|5|D|7|11|8|@]|9|@]|A|$E|F]]|$1|O|3|P|5|6|7|12|8|@$Q|13|R|14|S|T]]|9|@]|A|$]]|$1|U|3|-4|5|6|7|15|8|@]|9|@]|A|$]]]|V|$]]

Make sure in your controller that you have your http attribute like:

<pre><code>[HttpPost]
</code></pre>

also add the attribute in the controller: 

<pre><code>[ValidateAntiForgeryToken]
</code></pre>

In your form on your view you have to write:

<pre><code>@Html.AntiForgeryToken();
</code></pre>

I had Html.AntiForgeryToken(); without the @ sign while it was in a code block, it didn't give an error in Razor but did at runtime. Make sure you look at the @ sign of @Html.Ant.. if it is missing or not

blocks|key|3024947|text|在我的例子中，我让表单上的这个javascript提交：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3024948|$('form').submit(function+()+{
++++$('input').prop('disabled',+true);
});|code-block|syntax|javascript|3024949|这是从提交的表单中删除隐藏的RequestVerificationToken。我将其更改为：|3024950|$('form').submit(function+()+{
++++$('input[type=submit]').prop('disabled',+true);
++++$('input[type=text]').prop('readonly',+true);
++++$('input[type=password]').prop('readonly',+true);
});|3024951|..。它运行得很好。|3024952|entityMap^0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Q|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|R|8|@]|9|@]|A|$E|F]]|$1|K|3|L|5|6|7|S|8|@]|9|@]|A|$]]|$1|M|3|-4|5|6|7|T|8|@]|9|@]|A|$]]]|N|$]]

In my case, I had this javascript on the form submit:

<pre><code>$('form').submit(function () {
 $('input').prop('disabled', true);
});
</code></pre>

This was removing the hidden RequestVerificationToken from the form being submitted. I changed that to:

<pre><code>$('form').submit(function () {
 $('input[type=submit]').prop('disabled', true);
 $('input[type=text]').prop('readonly', true);
 $('input[type=password]').prop('readonly', true);
});
</code></pre>

... and it worked fine.

blocks|key|3024980|text|在我的几个控制器上的EPiServer解决方案中，索引操作有一个ContentOutputCache属性，它接受HttpGet。这些操作的每个视图都包含一个表单，该表单发布到HttpPost操作、相同的控制器或不同的控制器。一旦我从所有这些索引操作中删除了该属性，问题就消失了。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3024981|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

In my EPiServer solution on several controllers there was a ContentOutputCache attribute on the Index action which accepted HttpGet. Each view for those actions contained a form which was posting to a HttpPost action to the same controller or to a different one. 
As soon as I removed that attribute from all of those Index actions problem was gone.

blocks|key|190714|text|我想分享我的，我一直使用asp.net+MVC4和angularjs跟踪这个anti+forgerytoken+tutorial，但每次我使用$http.post请求时它都会抛出一个异常，我想出了解决方案就是将'X-Requested-With':+'XMLHttpRequest'添加到$http.post的头文件中，因为似乎(filterContext.HttpContext.Request.IsAjaxRequest())不会将它识别为ajax，这是我的示例代码。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|190715|App.js|190716|var+headers+=+{+++++++++++++'X-Requested-With':+'XMLHttpRequest',+++++++++++++'RequestVerificationToken':+$scope.token,+++++++++++++'Content-Type':+'application/json;+charset=utf-8;'+++++++++};|190717|$http({+++++++++++method:+'POST',+++++++++++url:+baseURL+%2B+'Save/User',+++++++++++data:+JSON.stringify($scope.formData),+++++++++++headers:+headers+++++++++}).then(function+(values)+{++++++++++++++alert(values.data);+++++++++}).catch(function+(err)+{+++++++++++++console.log(err.data);+++++++++});|190718|190719|SaveController|190720|[HttpPost]+++[MyValidateAntiForgeryToken]+++public+ActionResult+User(UserModel+usermodel)+++{++++++....|190721|entityMap|0|LINK|mutability|MUTABLE|url|http://techbrij.com/angularjs-antiforgerytoken-asp-net-mvc|1|https://stackoverflow.com/questions/33148695/identify-angular-js-ajax-calls-in-asp-net-mvc-code^0|4K|1F|12|Q|0|2X|10|1|0|0|0|5D|0|0|89|0|0|0|0|2V|0^^$0|@$1|2|3|4|5|6|7|10|8|@$9|11|A|12|B|C]]|D|@$9|13|A|14|1|15]|$9|16|A|17|1|18]]|E|$]]|$1|F|3|G|5|6|7|19|8|@]|D|@]|E|$]]|$1|H|3|I|5|6|7|1A|8|@$9|1B|A|1C|B|C]]|D|@]|E|$]]|$1|J|3|K|5|6|7|1D|8|@$9|1E|A|1F|B|C]]|D|@]|E|$]]|$1|L|3|-4|5|6|7|1G|8|@]|D|@]|E|$]]|$1|M|3|N|5|6|7|1H|8|@]|D|@]|E|$]]|$1|O|3|P|5|6|7|1I|8|@$9|1J|A|1K|B|C]]|D|@]|E|$]]|$1|Q|3|-4|5|6|7|1L|8|@]|D|@]|E|$]]]|R|$S|$5|T|U|V|E|$W|X]]|Y|$5|T|U|V|E|$W|Z]]]]

i'd like to share mine, i have been following this <a href="http://techbrij.com/angularjs-antiforgerytoken-asp-net-mvc" rel="nofollow noreferrer">anti forgerytoken tutorial</a> 
using asp.net mvc 4 with angularjs, but it throws an exception everytime i request using $http.post and i figured out the solution is just add
<a href="https://stackoverflow.com/questions/33148695/identify-angular-js-ajax-calls-in-asp-net-mvc-code">'X-Requested-With': 'XMLHttpRequest'</a> to the headers of $http.post, because it seems like the <code>(filterContext.HttpContext.Request.IsAjaxRequest())</code>
does not recognize it as ajax and here is my example code.

App.js

<code>var headers = {
 'X-Requested-With': 'XMLHttpRequest',
 'RequestVerificationToken': $scope.token,
 'Content-Type': 'application/json; charset=utf-8;'
 };</code>

<code>$http({
 method: 'POST',
 url: baseURL + 'Save/User',
 data: JSON.stringify($scope.formData),
 headers: headers
 }).then(function (values) {
 alert(values.data);
 }).catch(function (err) {
 console.log(err.data);
 });</code>

<hr>

SaveController

<code>[HttpPost]
 [MyValidateAntiForgeryToken]
 public ActionResult User(UserModel usermodel)
 {
 ....
</code>

blocks|key|191045|text|因为这是第一次搜索这个：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|191046|我只在Internet+Explorer中遇到了这个问题，不知道是什么问题。长话短说，它没有保存令牌的cookie部分，因为我们的(子)域中有一个下划线。在Chrome中工作，但IE/Edge不喜欢它。|191047|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

Because this comes up with the first search of this:

I had this issue only in Internet Explorer and couldnt figure out the what the issue was. Long story short it was not saving the cookie portion of the Token because our (sub)domain had an underscore in it. Worked in Chrome but IE/Edge didnt not like it.

blocks|key|188904|text|对于我们这些上传文件作为请求的一部分的人来说，另一种可能性。如果内容长度超过<httpRuntime+maxRequestLength="size+in+kilo+bytes"+/>，并且您使用的是请求验证令牌，则浏览器将显示'The+required+anti-forgery+form+field+"__RequestVerificationToken"+is+not+present'消息，而不是超出请求长度的消息。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|188905|将maxRequestLength设置为足以满足请求的值可以解决直接的问题-尽管我承认这不是一个合适的解决方案(我们希望用户知道文件大小的真正问题，而不是请求验证令牌丢失的问题)。|188906|entityMap^0|12|1H|35|2A|0|0^^$0|@$1|2|3|4|5|6|7|J|8|@$9|K|A|L|B|C]|$9|M|A|N|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|O|8|@]|D|@]|E|$]]|$1|H|3|-4|5|6|7|P|8|@]|D|@]|E|$]]]|I|$]]

Another possibility for those of us uploading files as part of the request. If the content length exceeds <code>&lt;httpRuntime maxRequestLength="size in kilo bytes" /&gt;</code> and you're using request verification tokens, the browser displays the <code>'The required anti-forgery form field "__RequestVerificationToken" is not present'</code> message instead of the request length exceeded message.

Setting maxRequestLength to a value large enough to cater for the request cures the immediate issue - though I'll admit it's not a proper solution (we want the user to know the true problem of file size, not that of request verification tokens missing).

blocks|key|2812323|text|这里的所有其他答案也是有效的，但如果它们都不能解决问题，那么也值得检查实际的标头是否被传递到服务器。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2812324|例如，在nginx后面的负载均衡环境中，默认配置是在将请求传递到服务器之前对__RequestVerificationToken头进行剥离，请参阅：simple+nginx+reverse+proxy+seems+to+strip+some+headers|offset|length|style|BOLD|2812325|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/23231063/simple-nginx-reverse-proxy-seems-to-strip-some-headers^0|0|1V|1P|22|1I|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Q|8|@$D|R|E|S|F|G]]|9|@$D|T|E|U|1|V]]|A|$]]|$1|H|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|O]]]]

All the other answers in here are also valid, but if none of them solve the issue it is also worth checking that the actual headers are being passed to the server.

For example, in a load balanced environment behind nginx, the default configuration is to strip out the __RequestVerificationToken header before passing the request on to the server, see: <a href="https://stackoverflow.com/questions/23231063/simple-nginx-reverse-proxy-seems-to-strip-some-headers">simple nginx reverse proxy seems to strip some headers</a>

blocks|key|3025088|text|在我的例子中，这是由于在webconfig的httpcookies中添加了requireSSL=true，这使得AntiForgeryToken停止工作。示例：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|3025089|<system.web>
++<httpCookies+httpOnlyCookies="true"+requireSSL="true"/>
</system.web>|code-block|syntax|javascript|3025090|为了让requireSSL=true和@Html.AntiForgeryToken()都能工作，我在Global.asax的Application_BeginRequest中添加了下面这一行|3025091|++++protected+void+Application_BeginRequest(object+sender,+EventArgs+e)
++{
++++AntiForgeryConfig.RequireSsl+=+HttpContext.Current.Request.IsSecureConnection;
++}|3025092|entityMap^0|M|B|11|F|0|0|3|F|J|O|1E|B|1Q|O|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@$9|R|A|S|B|C]|$9|T|A|U|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|V|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|W|8|@$9|X|A|Y|B|C]|$9|Z|A|10|B|C]|$9|11|A|12|B|C]|$9|13|A|14|B|C]]|D|@]|E|$]]|$1|M|3|N|5|H|7|15|8|@]|D|@]|E|$I|J]]|$1|O|3|-4|5|6|7|16|8|@]|D|@]|E|$]]]|P|$]]

In my case it was due to adding <code>requireSSL=true</code> to <code>httpcookies</code> in webconfig which made the AntiForgeryToken stop working. Example:

<pre><code>&lt;system.web&gt;
 &lt;httpCookies httpOnlyCookies="true" requireSSL="true"/&gt;
&lt;/system.web&gt;
</code></pre>

To make both <code>requireSSL=true</code> and <code>@Html.AntiForgeryToken()</code> work I added this line inside the <code>Application_BeginRequest</code> in <code>Global.asax</code>

<pre><code> protected void Application_BeginRequest(object sender, EventArgs e)
 {
 AntiForgeryConfig.RequireSsl = HttpContext.Current.Request.IsSecureConnection;
 }
</code></pre>

blocks|key|3025098|text|有时，您正在编写具有结果列表的表单操作方法。在这种情况下，您不能使用一个操作方法。所以你必须有两个同名的动作方法。一个具有[HttpGet]属性，另一个具有[HttpPost]属性。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|3025099|在[HttpPost]操作方法中，设置[ValidateAntiForgeryToken]属性，并将@Html.AntiForgeryToken()放入html表单中。|3025100|entityMap^0|1P|9|26|A|0|1|A|J|Q|1E|O|0^^$0|@$1|2|3|4|5|6|7|J|8|@$9|K|A|L|B|C]|$9|M|A|N|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|O|8|@$9|P|A|Q|B|C]|$9|R|A|S|B|C]|$9|T|A|U|B|C]]|D|@]|E|$]]|$1|H|3|-4|5|6|7|V|8|@]|D|@]|E|$]]]|I|$]]

Sometimes you are writing a form action method with a result list. In this case, you cannot work with one action method. So you have to have two action methods with the same name. One with <code>[HttpGet]</code> and another with <code>[HttpPost]</code> attribute.

In your <code>[HttpPost]</code> action method, set <code>[ValidateAntiForgeryToken]</code> attribute and also put <code>@Html.AntiForgeryToken()</code> in your html form.

blocks|key|191091|text|在我的例子中，我在创建一个AJAX+post时收到了这个错误，结果是__RequestVerificationToken值没有在调用中传递。我必须手动查找该字段的值，并将其设置为发送到端点的数据对象的属性。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|191092|即|191093|data.__RequestVerificationToken+=+$('input[name="__RequestVerificationToken"]').val();|code-block|syntax|javascript|191094|191095|示例|191096|HTML|BOLD|191097|++<form+id="myForm">
++++@Html.AntiForgeryToken()

++++

++++<input+type="submit"+class="submitButton"+value="Submit"+/>
++</form>|191098|Javascript|191099|$(document).on('click',+'#myForm+.submitButton',+function+()+{
++var+myData+=+{+...+};
++myData.__RequestVerificationToken+=+$('#myForm+input[name="__RequestVerificationToken"]').val();

++$.ajax({
++++type:+'POST',
++++url:+myUrl,
++++data:+myData,
++++contentType:+'application/x-www-form-urlencoded;+charset=utf-8',
++++dataType:+'json',
++++success:+function+(response)+{
++++++alert('Form+submitted');
++++},
++++error:+function+(e)+{
++++++console.error('Error+submitting+form',+e);
++++++alert('Error+submitting+form');
++++},
++});
++return+false;+//prevent+form+reload
});|191100|控制器|191101|[HttpPost]
[Route("myUrl")]
[ValidateAntiForgeryToken]
public+async+Task<ActionResult>+MyUrlAsync(MyDto+dto)
{
++++...
}|191102|entityMap^0|Y|Q|0|0|0|0|0|0|4|0|0|0|A|0|0|0|3|0|0^^$0|@$1|2|3|4|5|6|7|14|8|@$9|15|A|16|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|17|8|@]|D|@]|E|$]]|$1|H|3|I|5|J|7|18|8|@]|D|@]|E|$K|L]]|$1|M|3|-4|5|6|7|19|8|@]|D|@]|E|$]]|$1|N|3|O|5|6|7|1A|8|@]|D|@]|E|$]]|$1|P|3|Q|5|6|7|1B|8|@$9|1C|A|1D|B|R]]|D|@]|E|$]]|$1|S|3|T|5|J|7|1E|8|@]|D|@]|E|$K|L]]|$1|U|3|V|5|6|7|1F|8|@$9|1G|A|1H|B|R]]|D|@]|E|$]]|$1|W|3|X|5|J|7|1I|8|@]|D|@]|E|$K|L]]|$1|Y|3|Z|5|6|7|1J|8|@$9|1K|A|1L|B|R]]|D|@]|E|$]]|$1|10|3|11|5|J|7|1M|8|@]|D|@]|E|$K|L]]|$1|12|3|-4|5|6|7|1N|8|@]|D|@]|E|$]]]|13|$]]

In my case I was getting this error while making an AJAX post, it turned out to be that the <code>__RequestVerificationToken</code> value wasn't being passed across in the call. I had to manually find the value of this field and set this as a property on the data object that's sent to the endpoint.
i.e.
<pre><code>data.__RequestVerificationToken = $('input[name=&quot;__RequestVerificationToken&quot;]').val();
</code></pre>
<hr />
<h2>Example</h2>
HTML
<pre><code> &lt;form id=&quot;myForm&quot;&gt;
 @Html.AntiForgeryToken()

 &lt;!-- other input fields --&gt;

 &lt;input type=&quot;submit&quot; class=&quot;submitButton&quot; value=&quot;Submit&quot; /&gt;
 &lt;/form&gt;
</code></pre>
Javascript
<pre><code>$(document).on('click', '#myForm .submitButton', function () {
 var myData = { ... };
 myData.__RequestVerificationToken = $('#myForm input[name=&quot;__RequestVerificationToken&quot;]').val();

 $.ajax({
 type: 'POST',
 url: myUrl,
 data: myData,
 contentType: 'application/x-www-form-urlencoded; charset=utf-8',
 dataType: 'json',
 success: function (response) {
 alert('Form submitted');
 },
 error: function (e) {
 console.error('Error submitting form', e);
 alert('Error submitting form');
 },
 });
 return false; //prevent form reload
});
</code></pre>
Controller
<pre><code>[HttpPost]
[Route(&quot;myUrl&quot;)]
[ValidateAntiForgeryToken]
public async Task&lt;ActionResult&gt; MyUrlAsync(MyDto dto)
{
 ...
}
</code></pre>

blocks|key|2812414|text|在使用单独用户帐户的ASP.NET默认登录时，在Chrome中遇到此错误|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2812415|.cshtml：|2812416|@using+(Html.BeginForm("Login",+"Account",+new+{+ReturnUrl+=+ViewBag.ReturnUrl+},+FormMethod.Post,+new+{+@class+=+"form-horizontal",+role+=+"form"+}))
{
++++@Html.AntiForgeryToken()
++++<h4>Use+a+local+account+to+log+in.</h4>|code-block|syntax|javascript|2812417|控制器：|2812418|[HttpPost]
[AllowAnonymous]
[ValidateAntiForgeryToken]
public+async+Task<ActionResult>+Login(LoginViewModel+model,+string+returnUrl)|2812419|通过清除站点的站点数据来解决：|2812420|​|2812421|📷|atomic|offset|length|2812422|2812423|entityMap|0|IMAGE|mutability|IMMUTABLE|imageUrl|https://ask.qcloudimg.com/http-save/yehe-900000/b153b50fce62b5f77edb593e92a2cc72.png|imageAlt^0|0|0|0|0|0|0|0|0|1|0|0|0^^$0|@$1|2|3|4|5|6|7|15|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|16|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|17|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|18|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|19|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|1A|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|1B|8|@]|9|@]|A|$]]|$1|Q|3|R|5|S|7|1C|8|@]|9|@$T|1D|U|1E|1|1F]]|A|$]]|$1|V|3|P|5|6|7|1G|8|@]|9|@]|A|$]]|$1|W|3|-4|5|6|7|1H|8|@]|9|@]|A|$]]]|X|$Y|$5|Z|10|11|A|$12|13|14|-4]]]]

Got this error in Chrome with default login for ASP.NET with Individual User Accounts

.cshtml:

<pre><code>@using (Html.BeginForm("Login", "Account", new { ReturnUrl = ViewBag.ReturnUrl }, FormMethod.Post, new { @class = "form-horizontal", role = "form" }))
{
 @Html.AntiForgeryToken()
 &lt;h4&gt;Use a local account to log in.&lt;/h4&gt;
</code></pre>

Controller:

<pre><code>[HttpPost]
[AllowAnonymous]
[ValidateAntiForgeryToken]
public async Task&lt;ActionResult&gt; Login(LoginViewModel model, string returnUrl)
</code></pre>

Solved by clearing site data for the site:

<a href="https://i.stack.imgur.com/dzeTA.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/dzeTA.png" alt="enter image description here"></a>

blocks|key|2812429|text|我用这种方法解决了它|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2812430|[AttributeUsage(AttributeTargets.Method)]
public+class+ExcludeFromAntiForgeryValidationAttribute+:+Attribute{
}|code-block|syntax|javascript|2812431|并将System.Web.Helpers.AntiForgery.Validate(cookie+!=+null+?+cookie.Value+:+null,+formToken)放在if条件中|offset|length|style|CODE|2812432|bool+shouldValidate+=!filterContext.ActionDescriptor.GetCustomAttributes(typeof(ExcludeFromAntiForgeryValidationAttribute),+true).Any();
if+(shouldValidate){
++++System.Web.Helpers.AntiForgery.Validate(cookie+!=+null+?+cookie.Value+:+null,+formToken);
}|2812433|entityMap^0|0|0|2|2G|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|R|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|S|8|@$I|T|J|U|K|L]]|9|@]|A|$]]|$1|M|3|N|5|D|7|V|8|@]|9|@]|A|$E|F]]|$1|O|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|P|$]]

I have solved it this way
<pre><code>[AttributeUsage(AttributeTargets.Method)]
public class ExcludeFromAntiForgeryValidationAttribute : Attribute{
}
</code></pre>
and place <code>System.Web.Helpers.AntiForgery.Validate(cookie != null ? cookie.Value : null, formToken)</code> in if condition
<pre><code>bool shouldValidate =!filterContext.ActionDescriptor.GetCustomAttributes(typeof(ExcludeFromAntiForgeryValidationAttribute), true).Any();
if (shouldValidate){
 System.Web.Helpers.AntiForgery.Validate(cookie != null ? cookie.Value : null, formToken);
}
</code></pre>

blocks|key|2812442|text|如果你想在一个方法上使用ValidateAntiForgeryToken，你只需要将@Html.AntiForgeryToken()添加到使用上述方法的表单中。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2812443|如果您有与视图同名的方法(其形式为@Html.AntiForgeryToken()+)，那么在控制器中应该有两个重载的方法。|2812444|如下所示：|2812445|First->表示视图的ActionResult|2812446|[AllowAnonymous]
public+ActionResult+PasswordChange()
{
+++PasswordChangeViewModel+passwordChangeViewModel+=+new+PasswordChangeViewModel();
+++return+View(passwordChangeViewModel);
}|code-block|syntax|javascript|2812447|Second->用于HttpPost方法|2812448|[HttpPost]
[AllowAnonymous]
[ValidateAntiForgeryToken]
public+ActionResult+PasswordChange(PasswordChangeViewModel+passwordChangeViewModel)
{
+++//some+code
}+|2812449|entityMap^0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|T|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|U|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|V|8|@]|9|@]|A|$]]|$1|H|3|I|5|J|7|W|8|@]|9|@]|A|$K|L]]|$1|M|3|N|5|6|7|X|8|@]|9|@]|A|$]]|$1|O|3|P|5|J|7|Y|8|@]|9|@]|A|$K|L]]|$1|Q|3|-4|5|6|7|Z|8|@]|9|@]|A|$]]]|R|$]]

If you want to use [ValidateAntiForgeryToken] on a method you should just add @Html.AntiForgeryToken() to the form which is using the method mentioned.
If you have the method with the same name of the View(which has the form with @Html.AntiForgeryToken() ) then you should have two overloaded method in the controller.
Something like this:
First-&gt; for the ActionResult for the view
<pre><code>[AllowAnonymous]
public ActionResult PasswordChange()
{
 PasswordChangeViewModel passwordChangeViewModel = new PasswordChangeViewModel();
 return View(passwordChangeViewModel);
}
</code></pre>
Second-&gt; for the HttpPost method
<pre><code>[HttpPost]
[AllowAnonymous]
[ValidateAntiForgeryToken]
public ActionResult PasswordChange(PasswordChangeViewModel passwordChangeViewModel)
{
 //some code
} 
</code></pre>

I am using <code>Membership.create</code> user function, then the following error is occurring,

<blockquote>
 The required anti-forgery form field "__RequestVerificationToken" is
 not present
</blockquote>

How can I fix this?

The required anti-forgery form field "__RequestVerificationToken" is not present Error in user Registration

负载均衡

服务器

JSON

我正在使用Membership.create用户函数，然后出现以下错误，所需的防伪表单字段"__RequestVerificationToken“不存在我该如何解决这个问题呢？

问用户注册中出现所需的防伪表单字段"__RequestVerificationToken“不存在错误
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问用户注册中出现所需的防伪表单字段"__RequestVerificationToken“不存在错误EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问用户注册中出现所需的防伪表单字段"__RequestVerificationToken“不存在错误
EN