SESSION_COOKIE_SECURE = True Causing CSRF to always fail

[owenmead]

Whenever SESSION_COOKIE_SECURE is set to True, CSRF always fails.

Default setting for SESSION_COOKIE_SECURE is False.

[lepture]

A secure cookie has the secure attribute enabled and is only used via HTTPS, ensuring that the cookie is always 
encrypted when transmitting from client to server. This makes the cookie less likely to be exposed to cookie theft via 
eavesdropping.

Is your server https?

[owenmead]

When running with https, no problem. I guess it's a non-issue, although ideally it wouldn't have adverse affects when performing a CSRF check

[lepture]

@owenmead This is a non-issue. It has nothing to do with Flask-WTF and Flask. I am closing it now.

[groteworld]

Yikes, I just spent a good week racking my brain on this. Adding the phrase below so that it helps anyone else searching for this issue, because I couldn't find it. Glad there was no issue.. (except me)

{'csrf_token': ['CSRF token missing']}