RuntimeError：使用 CSRF 需要密钥。我使用了一个密钥，但它似乎仍然给出了错误

Question

这是我在制作网络应用程序时包含在 flask_blog.py 中的代码。我已经提到了 SECRET_KEY。任何人都可以查看它并让我知道此代码中可能出现的错误。提前致谢。

from flask import Flask, render_template, url_for, flash, redirect
from forms import RegistrationForm, LoginForm

app = Flask(__name__)
app.config['SECRET_KEY']='key'
posts=[
    {
        'author':'HC Verma',
        'title':'First blog Post',
        'content':'first post content'
    },
    {
        'author':'RD Sharma',
        'title':'Second blog Post',
        'content':'second post content'
    }
]


@app.route("/")
@app.route("/home")
def home():
    return render_template('home.html', posts=posts)


@app.route("/about")
def about():
    return render_template('about.html', title='About')


@app.route("/register", methods=['GET', 'POST'])
def register():
    form = RegistrationForm()
    if form.validate_on_submit():
        flash(f'Account created for {form.username.data}!', 'success')
        return redirect(url_for('home'))
    return render_template('register.html', title='Register', form=form)


@app.route("/login", methods=['GET', 'POST'])
def login():
    form = LoginForm()
    if form.validate_on_submit():
        if form.email.data == 'abc@gmail.com' and form.password.data == 'password':
            flash('You have been logged in!', 'success')
            return redirect(url_for('home'))
        else:
            flash('Login Unsuccessful. Please check username and password', 'danger')
    return render_template('login.html', title='Login', form=form)


if __name__ == '__main__':
    app.run(debug=True)

编辑：这是我面临的运行时错误，我在此处添加了屏幕截图的链接。 screenshot

同时添加具有 RegistrationForm 和 LoginForm 类的 forms.py 文件。

from flask_wtf import FlaskForm
from wtforms import StringField, PasswordField, SubmitField, 
   BooleanField
from wtforms.validators import DataRequired, Length, Email, EqualTo


class RegistrationForm(FlaskForm):
    username = StringField('Username',
                           validators=[DataRequired(), Length(min=2, 
    max=20)])
    email = StringField('Email',
                        validators=[DataRequired(), Email()])
    password = PasswordField('Password', validators=[DataRequired()])
    confirm_password = PasswordField('Confirm Password',
                                     validators=[DataRequired(), 
    EqualTo('password')])
    submit = SubmitField('Sign Up')


class LoginForm(FlaskForm):
    email = StringField('Email',
                        validators=[DataRequired(), Email()])
    password = PasswordField('Password', validators=[DataRequired()])
    remember = BooleanField('Remember Me')
    submit = SubmitField('Login')

编辑：2 这是两个模板 1)register.html-制作注册页面的模板

{% extends "layout.html" %}
{% block content %}
    <div class="content-section">
        <form method="POST" action="">
            {{ form.hidden_tag() }}
            <fieldset class="form-group">
                <legend class="border-bottom mb-4">Join Today</legend>
                <div class="form-group">
                    {{ form.username.label(class="form-control-label") }}

                    {% if form.username.errors %}
                        {{ form.username(class="form-control form-control-lg is-invalid") }}
                        <div class="invalid-feedback">
                            {% for error in form.username.errors %}
                                <span>{{ error }}</span>
                            {% endfor %}
                        </div>
                    {% else %}
                        {{ form.username(class="form-control form-control-lg") }}
                    {% endif %}
                </div>
                <div class="form-group">
                    {{ form.email.label(class="form-control-label") }}
                    {% if form.email.errors %}
                        {{ form.email(class="form-control form-control-lg is-invalid") }}
                        <div class="invalid-feedback">
                            {% for error in form.email.errors %}
                                <span>{{ error }}</span>
                            {% endfor %}
                        </div>
                    {% else %}
                        {{ form.email(class="form-control form-control-lg") }}
                    {% endif %}
                </div>
                <div class="form-group">
                    {{ form.password.label(class="form-control-label") }}
                    {% if form.password.errors %}
                        {{ form.password(class="form-control form-control-lg is-invalid") }}
                        <div class="invalid-feedback">
                            {% for error in form.password.errors %}
                                <span>{{ error }}</span>
                            {% endfor %}
                        </div>
                    {% else %}
                        {{ form.password(class="form-control form-control-lg") }}
                    {% endif %}
                </div>
                <div class="form-group">
                    {{ form.confirm_password.label(class="form-control-label") }}
                    {% if form.confirm_password.errors %}
                        {{ form.confirm_password(class="form-control form-control-lg is-invalid") }}
                        <div class="invalid-feedback">
                            {% for error in form.confirm_password.errors %}
                                <span>{{ error }}</span>
                            {% endfor %}
                        </div>
                    {% else %}
                        {{ form.confirm_password(class="form-control form-control-lg") }}
                    {% endif %}
                </div>
            </fieldset>
            <div class="form-group">
                {{ form.submit(class="btn btn-outline-info") }}
            </div>
        </form>
    </div>
    <div class="border-top pt-3">
        <small class="text-muted">
            Already Have An Account? <a class="ml-2" href="{{ url_for('login') }}">Sign In</a>
        </small>
    </div>
{% endblock content %}

1. login.html-制作登录页面的模板

        {% extends "layout.html" %}
    {% block content %}
        <div class="content-section">
            <form method="POST" action="">
                {{ form.hidden_tag() }}
        <fieldset class="form-group">
            <legend class="border-bottom mb-4">Log In Page</legend>
                     <div class="form-group">
                        {{ form.email.label(class="form-class-label") }}
                        {% if form.email.errors %}
                        {{ form.email(class="form-control form-control-lg is-invalid") }}
                        <div class="invalid-feedback">
                            {% for error in form.password.errors %}
                            <span> error </span>
                            {% endfor %}
                        </div>
                        {%else%}
    {   (class="form-control form-control-lg") }}
                        {% endif %}
                    </div>
                    <div class="form-group">
                        {{ form.password.label(class="form-class-label") }}
                        {% if form.password.errors %}
                        {{ form.password(class="form-control form-control-lg is-invalid") }}
                        <div class="invalid-feedback">
                            {% for error in form.password.errors %}
                            <span>{{error}} </span>
                            {% endfor %}
                        </div>
                        {%else%}
    {                       {{ form.password(class="form-control form-control-lg") }}
                        {% endif %}
                    </div>
                   <div class="form-check">
                    {{ form.remember(class="form-check-input") }}
                    {{ form.remember(class="form-class=label") }}
                   </div>
        </fieldset>
        <div class="form-group">
            {{ form.submit(class="btn btn-outline-info") }}
        </div>
        <small class="text-muted ml-2"> 
            <a href="#">
                Forgot Password?
            </a></small>
        </form>
   
        </div>
        <div class="border-top pt-3">
            <small class="text-muted">
                Need an account? Log in <a class="ml-2" href="{{ url_for('register') }}">
                Sign Up</a>
            </small>
        </div>
   
    {% endblock content %}
   

我已按照 cmets 中的要求添加了文件、模板和屏幕截图。 让我知道下面的代码有什么问题。

Answer 1

好的，所以我刚刚试用了您的代码示例，并进行了一些小改动（但尽管如此，我还没有收到丢失的 SECRET KEY，但请继续阅读）

app.py - 所以这里我只修改了home 和about 端点，因为我没有那些.html 文件，现在只是重定向到register 页面。同样在register 和login 中，我在成功登录/注册后也会重定向到不同的端点，因为我没有home 端点.html 文件。

from flask import Flask, render_template, url_for, flash, redirect
from forms import RegistrationForm, LoginForm

app = Flask(__name__)
app.config['SECRET_KEY'] = '84da5b8a39a6d06bf8bc7a60cedcac93'
posts = [
    {
        'author': 'HC Verma',
        'title': 'First blog Post',
        'content': 'first post content'
    },
    {
        'author': 'RD Sharma',
        'title': 'Second blog Post',
        'content': 'second post content'
    }
]


@app.route("/")
@app.route("/home")
def home():
    # return render_template('home.html', posts=posts)
    return redirect(url_for('register'))


@app.route("/about")
def about():
    # return render_template('about.html', title='About')
    return redirect(url_for('register'))


@app.route("/register", methods=['GET', 'POST'])
def register():
    form = RegistrationForm()
    if form.validate_on_submit():
        flash(f'Account created for {form.username.data}!', 'success')
        return redirect(url_for('login'))
    return render_template('register.html', title='Register', form=form)


@app.route("/login", methods=['GET', 'POST'])
def login():
    form = LoginForm()
    if form.validate_on_submit():
        if form.email.data == 'abc@gmail.com' and form.password.data == 'password':
            flash('You have been logged in!', 'success')
            return redirect(url_for('register'))
        else:
            flash('Login Unsuccessful. Please check username and password', 'danger')
    return render_template('login.html', title='Login', form=form)


if __name__ == '__main__':
    app.run(debug=True)

forms.py - 我没有对其进行任何更改。

from flask_wtf import FlaskForm
from wtforms import StringField, PasswordField, SubmitField, BooleanField
from wtforms.validators import DataRequired, Length, Email, EqualTo


class RegistrationForm(FlaskForm):
    username = StringField('Username',
                           validators=[DataRequired(), Length(min=2, 
    max=20)])
    email = StringField('Email',
                        validators=[DataRequired(), Email()])
    password = PasswordField('Password', validators=[DataRequired()])
    confirm_password = PasswordField('Confirm Password',
                                     validators=[DataRequired(), 
    EqualTo('password')])
    submit = SubmitField('Sign Up')


class LoginForm(FlaskForm):
    email = StringField('Email',
                        validators=[DataRequired(), Email()])
    password = PasswordField('Password', validators=[DataRequired()])
    remember = BooleanField('Remember Me')
    submit = SubmitField('Login')

layout.html - 我创建了自己的页面，仅用于渲染 register 和 login 页面

<!DOCTYPE html>
<html>
<head>
<title>Page Title</title>
</head>
<body>

{% block content %}{% endblock %}

</body>
</html> 

register.html - 未进行任何更改

{% extends "layout.html" %}
{% block content %}
    <div class="content-section">
        <form method="POST" action="">
            {{ form.hidden_tag() }}
            <fieldset class="form-group">
                <legend class="border-bottom mb-4">Join Today</legend>
                <div class="form-group">
                    {{ form.username.label(class="form-control-label") }}

                    {% if form.username.errors %}
                        {{ form.username(class="form-control form-control-lg is-invalid") }}
                        <div class="invalid-feedback">
                            {% for error in form.username.errors %}
                                <span>{{ error }}</span>
                            {% endfor %}
                        </div>
                    {% else %}
                        {{ form.username(class="form-control form-control-lg") }}
                    {% endif %}
                </div>
                <div class="form-group">
                    {{ form.email.label(class="form-control-label") }}
                    {% if form.email.errors %}
                        {{ form.email(class="form-control form-control-lg is-invalid") }}
                        <div class="invalid-feedback">
                            {% for error in form.email.errors %}
                                <span>{{ error }}</span>
                            {% endfor %}
                        </div>
                    {% else %}
                        {{ form.email(class="form-control form-control-lg") }}
                    {% endif %}
                </div>
                <div class="form-group">
                    {{ form.password.label(class="form-control-label") }}
                    {% if form.password.errors %}
                        {{ form.password(class="form-control form-control-lg is-invalid") }}
                        <div class="invalid-feedback">
                            {% for error in form.password.errors %}
                                <span>{{ error }}</span>
                            {% endfor %}
                        </div>
                    {% else %}
                        {{ form.password(class="form-control form-control-lg") }}
                    {% endif %}
                </div>
                <div class="form-group">
                    {{ form.confirm_password.label(class="form-control-label") }}
                    {% if form.confirm_password.errors %}
                        {{ form.confirm_password(class="form-control form-control-lg is-invalid") }}
                        <div class="invalid-feedback">
                            {% for error in form.confirm_password.errors %}
                                <span>{{ error }}</span>
                            {% endfor %}
                        </div>
                    {% else %}
                        {{ form.confirm_password(class="form-control form-control-lg") }}
                    {% endif %}
                </div>
            </fieldset>
            <div class="form-group">
                {{ form.submit(class="btn btn-outline-info") }}
            </div>
        </form>
    </div>
    <div class="border-top pt-3">
        <small class="text-muted">
            Already Have An Account? <a class="ml-2" href="{{ url_for('login') }}">Sign In</a>
        </small>
    </div>
{% endblock content %}

login.html - 这里我做了一些修改，首先我修复了登录表单。

1. 修正了 html 拼写错误：

来自

                  <div class="form-group">
                     {{ form.email.label(class="form-class-label") }}
                     {% if form.email.errors %}
                     {{ form.email(class="form-control form-control-lg is-invalid") }}
                     <div class="invalid-feedback">
                         {% for error in form.password.errors %}
                         <span> error </span>
                         {% endfor %}
                     </div>
                     {%else%}
 {   (class="form-control form-control-lg") }}
                     {% endif %}
                 </div>

到

                 <div class="form-group">
                    {{ form.email.label(class="form-class-label") }}
                    {% if form.email.errors %}
                    {{ form.email(class="form-control form-control-lg is-invalid") }}
                    <div class="invalid-feedback">
                        {% for error in form.password.errors %}
                        <span> error </span>
                        {% endfor %}
                    </div>
                    {%else%}
                        <div class="form-control form-control-lg"></div>
                    {% endif %}
                </div>

1. password 字段不正确

{                       {{ form.password(class="form-control form-control-lg") }}

改为

{{ form.password(class="form-control form-control-lg") }}

1. email 字段丢失，所以我添加了

{{ form.email(class="form-control form-control-lg") }}

所以最终的结果是这样的：

{% extends "layout.html" %}
{% block content %}
    <div class="content-section">
        <form method="POST" action="">
            {{ form.hidden_tag() }}
    <fieldset class="form-group">
        <legend class="border-bottom mb-4">Log In Page</legend>
                 <div class="form-group">
                    {{ form.email.label(class="form-class-label") }}
                    {% if form.email.errors %}
                    {{ form.email(class="form-control form-control-lg is-invalid") }}
                    <div class="invalid-feedback">
                        {% for error in form.password.errors %}
                        <span> error </span>
                        {% endfor %}
                    </div>
                    {%else%}
                        <div class="form-control form-control-lg"></div>
                    {% endif %}
                </div>
                <div class="form-group">
                    {{ form.password.label(class="form-class-label") }}
                    {% if form.password.errors %}
                        {{ form.password(class="form-control form-control-lg is-invalid") }}
                        <div class="invalid-feedback">
                            {% for error in form.password.errors %}
                            <span>{{error}} </span>
                            {% endfor %}
                        </div>
                    {%else%}
                       {{ form.email(class="form-control form-control-lg") }}
                       {{ form.password(class="form-control form-control-lg") }}
                    {% endif %}
                </div>
               <div class="form-check">
                {{ form.remember(class="form-check-input") }}
                {{ form.remember(class="form-class=label") }}
               </div>
    </fieldset>
    <div class="form-group">
        {{ form.submit(class="btn btn-outline-info") }}
    </div>
    <small class="text-muted ml-2"> 
        <a href="#">
            Forgot Password?
        </a></small>
    </form>

    </div>
    <div class="border-top pt-3">
        <small class="text-muted">
            Need an account? Log in <a class="ml-2" href="{{ url_for('register') }}">
            Sign Up</a>
        </small>
    </div>

{% endblock content %}

所以您提供的代码工作正常，这意味着您有另一个地方出现此错误。即使您在app.config 中提供了密钥，也可能出现丢失密钥的情况，即您没有使用烧瓶jinja2 引擎并使用例如发送请求。 jquery ajax 或类似的调用，这意味着这些不是来自jinja2 表单的调用缺少secret key 并且要解决它，您需要为请求提供密钥 - 为此您可以阅读并查看更多flask-wtf docs 中的示例。