Piwik\Plugin\Controller::checkTokenInUrl PHP Method

    protected function checkTokenInUrl()
    {
        $tokenRequest = Common::getRequestVar('token_auth', false);
        $tokenUser = Piwik::getCurrentUserTokenAuth();
        if (empty($tokenRequest) && empty($tokenUser)) {
            return;
            // UI tests
        }
        if ($tokenRequest !== $tokenUser) {
            throw new NoAccessException(Piwik::translate('General_ExceptionInvalidToken'));
        }
    }