Fix tests

tests/__init__.py

@@ -22,18 +22,11 @@ class SecurityTest(TestCase):
         app = self._create_app(self.AUTH_CONFIG or {}, **app_kwargs)
         app.debug = False
         app.config['TESTING'] = True
+        app.config['WTF_CSRF_ENABLED'] = False
 
         self.app = app
         self.client = app.test_client()
 
-        with self.client.session_transaction() as session:
-            session['csrf'] = 'csrf_token'
-
-        csrf_hmac = hmac.new(self.app.config['SECRET_KEY'],
-                             'csrf_token'.encode('utf8'),
-                             digestmod=sha1)
-        self.csrf_token = '##' + csrf_hmac.hexdigest()
-
     def _create_app(self, auth_config, **kwargs):
         return create_app(auth_config, **kwargs)
 
@@ -43,16 +36,13 @@ class SecurityTest(TestCase):
                                headers=headers)
 
     def _post(self, route, data=None, content_type=None, follow_redirects=True, headers=None):
-        if isinstance(data, dict):
-            data['csrf_token'] = self.csrf_token
-
         content_type = content_type or 'application/x-www-form-urlencoded'
         return self.client.post(route, data=data,
                                 follow_redirects=follow_redirects,
                                 content_type=content_type, headers=headers)
 
     def register(self, email, password='password'):
-        data = dict(email=email, password=password, csrf_token=self.csrf_token)
+        data = dict(email=email, password=password)
         return self.client.post('/register', data=data, follow_redirects=True)
 
     def authenticate(self, email="matt@lp.com", password="password", endpoint=None, **kwargs):
@@ -62,11 +52,10 @@ class SecurityTest(TestCase):
     def json_authenticate(self, email="matt@lp.com", password="password", endpoint=None):
         data = """{
             "email": "%s",
-            "password": "%s",
-            "csrf_token": "%s"
+            "password": "%s"
         }"""
         return self._post(endpoint or '/login', content_type="application/json",
-                          data=data % (email, password, self.csrf_token))
+                          data=data % (email, password))
 
     def logout(self, endpoint=None):
         return self._get(endpoint or '/logout', follow_redirects=True)