title: Flask-Restful POST fails due CSRF protection of Flask-WTF
body: <p>I am using normal flask web + flask-restful. So I need CSRF protection for web but not for REST.</p>
  
  <p>The moment I enable <code>CsrfProtect(app)</code> of <code>flask-wtf</code>, all my post unit tests for <code>flask-restful</code> return a 400.</p>
  
  <p>Is there a way to disable CSRF protection for REST services since they are coming from mobile handsets without session handling anyway, hence CSRF wouldn't make much sense.</p>
  
  <p>This is how I test it:</p>
  
  <pre><code>rv = self.client.post('api/v1.0/verify-email', environ_base={'REMOTE_ADDR': '127.0.0.1'}, headers={'Content-Type':'application/json'}, data=json.dumps(data))
  self.check_content_type(rv.headers)
  eq_(rv.status_code, 412)
  </code></pre>