title: How to create anti forgery token in a client-side application like angular?
body: <p>In an ASP.NET MVC application, we use <code>@Html.AntiForgeryToken()</code> in the user login form. Then in the controller, the <code>[ValidateAntiForgeryToken]</code> filter helps validate the token to prevent automated login attempt.</p>
  
  <p>Now we are building angular apps and I wonder if we should add <code>[ValidateAntiForgeryToken]</code> to our ApiController, and how the Anti-forgery token will be generated in this situation. Any advice?</p>