diff --git a/internal/web/actions/default/servers/server/settings/access/index.go b/internal/web/actions/default/servers/server/settings/access/index.go
index d43165fd..93570c1b 100644
--- a/internal/web/actions/default/servers/server/settings/access/index.go
+++ b/internal/web/actions/default/servers/server/settings/access/index.go
@@ -61,7 +61,6 @@ func (this *IndexAction) RunPost(params struct {
 	AuthJSON []byte
 
 	Must *actions.Must
-	CSRF *actionutils.CSRF
 }) {
 	defer this.CreateLogInfo("修改Web %d 的鉴权设置", params.WebId)
 
diff --git a/internal/web/actions/default/servers/server/settings/locations/access/index.go b/internal/web/actions/default/servers/server/settings/locations/access/index.go
index 2eddf772..3469b7b3 100644
--- a/internal/web/actions/default/servers/server/settings/locations/access/index.go
+++ b/internal/web/actions/default/servers/server/settings/locations/access/index.go
@@ -61,7 +61,6 @@ func (this *IndexAction) RunPost(params struct {
 	AuthJSON []byte
 
 	Must *actions.Must
-	CSRF *actionutils.CSRF
 }) {
 	defer this.CreateLogInfo("修改Web %d 的认证设置", params.WebId)
 
diff --git a/web/views/@default/servers/server/settings/access/index.html b/web/views/@default/servers/server/settings/access/index.html
index 45590f0a..23f7bfcf 100644
--- a/web/views/@default/servers/server/settings/access/index.html
+++ b/web/views/@default/servers/server/settings/access/index.html
@@ -4,7 +4,6 @@
 
 <div class="right-box with-menu">
     <form class="ui form" data-tea-action="$" data-tea-success="success" ref="authForm">
-        <csrf-token></csrf-token>
         <input type="hidden" name="webId" :value="webId">
         <http-auth-config-box :v-auth-config="authConfig" @change="changeMethods"></http-auth-config-box>
         <submit-btn @ref=""></submit-btn>
diff --git a/web/views/@default/servers/server/settings/locations/access/index.html b/web/views/@default/servers/server/settings/locations/access/index.html
index 675d5b27..9309c7c0 100644
--- a/web/views/@default/servers/server/settings/locations/access/index.html
+++ b/web/views/@default/servers/server/settings/locations/access/index.html
@@ -7,9 +7,9 @@
 
     <div class="right-box tiny">
         <form class="ui form" data-tea-action="$" data-tea-success="success" ref="authForm">
-            <csrf-token></csrf-token>
             <input type="hidden" name="webId" :value="webId">
-            <http-auth-config-box :v-auth-config="authConfig" :v-is-location="true" @change="changeMethods"></http-auth-config-box>
+            <http-auth-config-box :v-auth-config="authConfig" :v-is-location="true"
+                                  @change="changeMethods"></http-auth-config-box>
             <submit-btn></submit-btn>
         </form>
     </div>