From 2a0b582911078e930f533b8acde7d0c3078647a1 Mon Sep 17 00:00:00 2001
From: Matt Wright <matt@nobien.net>
Date: Sun, 6 Jan 2013 20:41:01 -0500
Subject: [PATCH] Change `csrf_enabled` parameter in forms to check for
 incoming JSON data. Fix #63

---
 flask_security/forms.py | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/flask_security/forms.py b/flask_security/forms.py
index 373debc..dc99118 100644
--- a/flask_security/forms.py
+++ b/flask_security/forms.py
@@ -42,7 +42,11 @@ def valid_user_email(form, field):
 
 class Form(BaseForm):
     def __init__(self, *args, **kwargs):
-        kwargs.setdefault('csrf_enabled', not current_app.testing)
+        if current_app.testing:
+            csrf_enabled = False
+        else:
+            csrf_enabled = request.json is None
+        kwargs.setdefault('csrf_enabled', csrf_enabled)
         super(Form, self).__init__(*args, **kwargs)