通过 API 删除用户时出现错误的 CSRF 响应

Yes. I’ve tried both the generic one for “system” and my own, as an admin. I have been passing these as GET or POST parameters along with the cookie.