Hi @Asutosh_Jena_ , But this seems like a fair ask to have CSRF token for anonymous user (end user of the website) for the case where they submit a form (POST request most probably). This will avoid non-authenticated request for form submissions like maybe from any postman app by any hacker.