Why it is necessary to refresh CSRF token per form request

Question

Is it necessary to refresh CSRF token per form request or any particular need to generate a new CSRF token for every request.  ?

Answer 1

Hello,

Generating a new CSRF token for each request is not necessary. However, it is only important for login purposes, because it provides an authentication check for each login attempts. 

The purpose of having a Refreshed Laravel CSRF token is that it prevents session fixation from any web attacker, and as a result possibility of any intended CSRF attack.

 Besides it, there isn’t any particular need to generate a new CSRF token for every request.