fix-cache

lupus_decoupled_form-no-cache-authenticated.patch

diff --git a/modules/lupus_decoupled_form/src/Controller/CustomElementsFormControllerTrait.php
b/modules/lupus_decoupled_form/src/Controller/CustomElementsFormControllerTrait.php
index 1234567..abcdefg 100644
--- a/modules/lupus_decoupled_form/src/Controller/CustomElementsFormControllerTrait.php
+++ b/modules/lupus_decoupled_form/src/Controller/CustomElementsFormControllerTrait.php
@@ -44,6 +44,10 @@ trait CustomElementsFormControllerTrait {
     foreach (['form_id', 'attributes', 'method'] as $key) {
       $element->setAttribute($key, $form['#' . $key] ?? NULL);
     }
+    // Do not cache forms for authenticated users to avoid cached CSRF tokens.
+    if (\Drupal::currentUser()->isAuthenticated()) {
+      $element->mergeCacheMaxAge(0);
+    }
     return $element;
   }