Do anti forgery tokens expire?
Could you please clarify for me if anti-forgery tokens have an expiration date? I'm curious to understand if these tokens maintain their validity indefinitely, or if they expire after a certain period of time. Is there a standard expiration policy that applies to most anti-forgery tokens, or does it vary depending on the specific system or application they're used in? Additionally, if they do expire, what's the typical timeframe for this expiration, and how does the expiration process work? I'm interested in learning more about the security implications of this aspect of anti-forgery tokens.