Initialize CSRF protection

This commit is contained in:
richard-dds 2018-08-06 16:21:43 -04:00
parent 4c730b57dd
commit 8567038736

View File

@ -6,6 +6,7 @@ from flask import Flask, request, g
from flask_session import Session from flask_session import Session
import redis import redis
from unipath import Path from unipath import Path
from flask_wtf.csrf import CSRFProtect
from atst.database import db from atst.database import db
from atst.assets import environment as assets_environment from atst.assets import environment as assets_environment
@ -31,6 +32,7 @@ def make_app(config):
static_folder=parent_dir.child("static").absolute(), static_folder=parent_dir.child("static").absolute(),
) )
redis = make_redis(config) redis = make_redis(config)
csrf = CSRFProtect()
app.config.update(config) app.config.update(config)
app.config.update({"SESSION_REDIS": redis}) app.config.update({"SESSION_REDIS": redis})
@ -39,6 +41,7 @@ def make_app(config):
make_crl_validator(app) make_crl_validator(app)
db.init_app(app) db.init_app(app)
csrf.init_app(app)
Session(app) Session(app)
assets_environment.init_app(app) assets_environment.init_app(app)