api: Hardening token cookie against Cross-site Request Forgery ?

[SamuelPull]

• I have searched the issues of this repository and believe that this is not a duplicate.

Description 😯

• Investigate a potential of CSRF, its impact and needed mitigations (https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html)

If CORS is disabled, such potential might already be zero, and no further work would be required. Periodically checking the security of the application is certainly not a waste of time.

How to reproduce 🕹

Your Environment 🌎

Tech	Version
Frontend	v1.?.?
API	v1.?.?
Blockchain	v1.?.?
Export-Service	v1.?.?
Email-Service	v1.?.?
Storage-Service	v1.?.?

[stale]

This issue has been automatically marked as stale because it has not had activity for 30 days. It will be closed if no further activity occurs. Thank you for your contributions.

[stale]

This issue has been automatically closed because of inactivity. You can re-open it if needed.