>>> [!note] Migrated issue <!-- Drupal.org comment --> <!-- Migrated from issue #3504510. --> Reported by: [d0t15t](https://www.drupal.org/user/132353) Related to !496 >>> <h3 id="summary-problem-motivation">Problem/Motivation</h3> <p>My goal is for the anonymous user to access and use the chatbot. Currently there's an whenever the anonymous user sends a message in the Deepchat-block:</p> <p>Path: /api/deepchat?token=xxx. Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException: 'csrf_token' URL query argument is invalid. in Drupal\Core\Routing\AccessAwareRouter-&gt;checkAccess() (line 118 of /var/www/html/web/core/lib/Drupal/Core/Routing/AccessAwareRouter.php).</p> <p>This can be 'fixed' by removing the requirement for `_csrf_token` in the route (see patch), but probably that's not ideal.</p>