csrf session token invalid
Closed this issue · 2 comments
bubner commented
On browsers with Block Third Party cookies and other cookie modifications, flask-wtf invalidates the session token much more frequently. This leads to an unusable app that keeps flagging the CSRF violation error.
bubner commented
Temporarily DISABLED CSRF protection for the meantime. I will need to investigate this later as we are running in an inoperable state.
bubner commented
Might be due to the fact multiple instances are being created of the application, and the secret_key is being mutated when it shouldn't.