can someone explain me what is the role of
syncId aswell as the
clientId ?
There are placed in the
csrf-token which is in turn placed in the http request.
I know that the
csrf token is a protection against csrf-attacks, but it contains more value than other csrf-token I have seen.
If you watch this webinar where we are configure performance testing with Jmeter, this question of yours gets covered pretty well too. https://www.youtube.com/watch?v=XQ1ws12W6gk
is the usage of the clientId something new? Because I look a page which is built with vaadin and using the network inspector showed me, that no clientId was visible…only the syncId.
To be honest the diffrence is not clear to me. In the video it says that the syncId takes care that no requests are dropped between other requests. A typical identifier for each request, but the clientId is the same too wright? The only difference I can see is that clientId increases from some client-side interactions only.