Generating a CSRF token manually with Flask WTF-Forms

Question

I'd like to create and fill out a Flask WTF-Form using only python code. However, the form doesn't automatically generate a CSRF token when I create it with python code. Is there any way to do this manually?

The form in question:

from flask_wtf import Form
from wtforms import StringField
from wtforms.validators import DataRequired, URL

class URLForm(Form):
    url = StringField('url', validators=[DataRequired(), URL(), Level3Url()])

the code I use to generate the form:

from forms import URLForm
form = URLForm()
if 'url' in request.args:
    url = request.args.get('url')
    form.url.data = url
    if form.validate():
        ...

davidism · Accepted Answer · 2018-08-28 16:46:10Z

1

You'd be effectively disabling CSRF protection by generating and passing a token to the form locally. It's only effective when the user submits a previously generated token.

Since you're not using CSRF protection, disable it. You can also pass request.args as the source of data.

form = URLForm(request.args, csrf_enabled=False)

If you want to use CSRF for this form, then the form needs to send the csrf_token field, which can be rendered with {{ form.csrf_token }} or {{ form.hidden_tag() }}.

edited Aug 28, 2018 at 16:46

answered Jul 6, 2016 at 18:58

davidism

128k31 gold badges417 silver badges348 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Lukasz Dynowski · Accepted Answer · 2018-08-08 10:06:51Z

0

In newest version of flask_wtf (0.14.2) you can disable csrf token in this way.

form = URLForm(request.args, meta={'csrf': False})

answered Aug 8, 2018 at 10:06

Lukasz Dynowski

14k14 gold badges99 silver badges150 bronze badges

Collectives™ on Stack Overflow

Generating a CSRF token manually with Flask WTF-Forms

2 Answers 2

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related