Implements CSRF verification

Author: rafaelhenrique

tvseries/__init__.py

@@ -1,7 +1,7 @@
 from flask import Flask
 
 from tvseries import config
-from tvseries.ext import db
+from tvseries.ext import db, csrf
 from tvseries.core import core_blueprint
 
 
@@ -10,4 +10,5 @@ def create_app(config=config.ProductionConfig):
     app.config.from_object(config)
     app.register_blueprint(core_blueprint, url_prefix='/')
     db.init_app(app)
+    csrf.init_app(app)
     return app

tvseries/config.py

@@ -11,6 +11,7 @@ class BaseConfig(object):
     SQLALCHEMY_TRACK_MODIFICATIONS = True
     COLLECT_STATIC_ROOT = os.path.join(BASE_DIR, "static")
     COLLECT_STORAGE = 'flask_collect.storage.file'
+    WTF_CSRF_ENABLED = True
     DEBUG = False
     TESTING = False
 
@@ -22,6 +23,7 @@ class DevelopmentConfig(BaseConfig):
 class TestConfig(BaseConfig):
     SQLALCHEMY_DATABASE_URI = 'sqlite:///tvseries-test.sqlite3'
     TESTING = True
+    WTF_CSRF_ENABLED = False
 
 
 class ProductionConfig(BaseConfig):

tvseries/ext.py

@@ -1,3 +1,5 @@
 from flask_sqlalchemy import SQLAlchemy
+from flask_wtf.csrf import CsrfProtect
 
 db = SQLAlchemy()
+csrf = CsrfProtect()