基于halo源码自定义restful api，访问报错An expected CSRF token cannot be found

是哪个地方有限制么，只能访问get请求的api，post、put、delete都报这个错：An expected CSRF token cannot be found