Skip to content

Jwt_optional and POST method #129

@johaven

Description

@johaven

I'm facing an issue since i updated from 3.3.4 to 3.7.0.
In 3.3.4 this kind of route worked without any problems:

@app.route('/partially-protected', methods=['GET', 'POST'])
@jwt_optional
def my_route():
...

Since 3.7.0 during a post request the CSRF token is required.
Is it intentional ? Is it useful to protect this kind of route when auth is optional ?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions