flask-security icon indicating copy to clipboard operation
flask-security copied to clipboard

Published 20 hours ago • verified publisher icon mattupstate

Authentication Tokens without globally disabling CSRF

Open jminardi opened this issue 7 years ago • 0 comments

I have an app with some web views and forms, so I have CSRF enabled. I would also like to have a few API endpoints working with the same app.

It is possible to allow API login (possibly on a different endpoint like /api/login) while still allowing CSRF on all web app endpoints?

jminardi avatar Jul 15 '18 19:07 jminardi