XSRF or CSRF with Angular and Dot Net Core Web API

Question

Hi team,

 

We are using angular js and .net core technologies.

 

application is breaking if I set the httponly attribute true.

 

context.Response.Cookies.Append("XSRF-TOKEN", tokens.RequestToken, new CookieOptions() { HttpOnly = true});