I use ionic serve, which runs the application in browser (I use Chrome) and reloads the application each time I make changes to the code. To avoid CORS problems, I use a proxy in ionic.
With SP03 I got the token always, independent of cache/cookie clearing and independent of the time intervals between requests.
Now (with SMP Server SP08, but got same problem with SP05, 06 and 07), I will only get the token at the beginning of the session, then no token (replicated with REST client as you can see in the second picture of the third post in this discussion).
For me, it looks like starting with SMP Server SP05, the behaviour of the server has changed when sending a GET request with "X-CSRF-Token: fetch".
Has nobody else had a similar issue? Can you reproduce it?