https://flask.palletsprojects.com/zh-cn/stable/patterns/wtforms/

app.config['SECRET_KEY'] = 'your-secret-key'

<input type="hidden" name="csrf_token" value="...">

Flask-WTF

pip install flask flask-wtf

from flask_wtf import FlaskForm

from wtforms import StringField, PasswordField, SubmitField

from wtforms.validators import DataRequired, Length, EqualTo

class RegisterForm(FlaskForm):    username = StringField("用户名", validators=[        DataRequired(message="用户名不能为空"),        Length(min=3, max=16, message="用户名长度3-16位")    ])    password = PasswordField("密码", validators=[        DataRequired(message="密码不能为空"),        Length(min=6, message="密码至少6位")    ])    password2 = PasswordField("确认密码", validators=[        DataRequired(message="请再次输入密码"),        EqualTo("password", message="两次输入密码不一致")    ])    submit = SubmitField("注册")

@bp.route('/register', methods=['GET', 'POST'])def register():    register_form = RegisterForm()    # 1、判断请求方式    if request.method == 'POST':        # 获取注册的用户名        username = register_form.username.data        # 2、验证参数        if register_form.validate_on_submit():            flash(username + '注册成功','wtf_form')            return redirect(url_for('auth.register'))        else:            flash('注册失败','wtf_form')    return render_template('auth/register.html', form=register_form)

    <h1>用户注册:wtf方式</h1>    <formmethod="post">        {{ form.csrf_token() }}        <p>            {{ form.username.label }}<br>            {{ form.username(size=32) }}            {% for err in form.username.errors %}                <spanstyle="color:red">{{ err }}</span>            {% endfor %}        </p>        <p>            {{ form.password.label }}<br>            {{ form.password(size=32) }}            {% for err in form.password.errors %}                <spanstyle="color:red">{{ err }}</span>            {% endfor %}        </p>        <p>            {{ form.password2.label }}<br>            {{ form.password2(size=32) }}            {% for err in form.password2.errors %}                <spanstyle="color:red">{{ err }}</span>            {% endfor %}        </p>        <p>{{ form.submit() }}</p>    </form>    <!-- 展示flash提示消息 -->    {% for msg in get_flashed_messages(category_filter=['wtf_form']) %}        <pstyle="color:green">{{ msg }}</p>    {% endfor %}