title: Python Flask-WTF CSRF for Stateless Application
body: <p>May I know how to implement CSRF using python Flask-WTF library without using cookie as mentioned in the answer of this post (<a href="https://stackoverflow.com/questions/21357182/csrf-token-necessary-when-using-stateless-sessionless-authentication">CSRF Token necessary when using Stateless(= Sessionless) Authentication?</a>) by James Ward (<a href="http://www.jamesward.com/2013/05/13/securing-single-page-apps-and-rest-services" rel="nofollow noreferrer">http://www.jamesward.com/2013/05/13/securing-single-page-apps-and-rest-services</a>).</p>
  
  <p>Currently I am hosting my application in Google Cloud Run which is serverless and stateless, It runs into a problem that sometime (not all the time) when client side making subsequent ajax request after the first load, it could not find the Session Token created during the first load when the server is auto scale up and down.</p>
  
  <p>Thank you in advance!</p>