@csrf_excempt does not work on @app.route

[alfonsrv]

Trying to set @csrf_excempt (from django.views.decorators.csrf import csrf_exempt) on a view decorated with @app.route does not work as expected – CSRF-Validation is still happening for POST requests.

[sover02]

Had the same issue; I ended up implementing the csrf token for non API views.

API views don't seem to have the issue unless you implement Django's session auth into them.