-
-
Notifications
You must be signed in to change notification settings - Fork 247
Closed
Description
I'm facing an issue since i updated from 3.3.4 to 3.7.0.
In 3.3.4 this kind of route worked without any problems:
@app.route('/partially-protected', methods=['GET', 'POST'])
@jwt_optional
def my_route():
...Since 3.7.0 during a post request the CSRF token is required.
Is it intentional ? Is it useful to protect this kind of route when auth is optional ?
Metadata
Metadata
Assignees
Labels
No labels