Flask_jwt_extended Csrf_token In Flask_restful

I'm only setting access token in cookies. But I found CSRF_token also in cookies. I don't understand why it's happening and how it's happening. Look my code:- Setting access token.

Solution 1:

I found out that, flask_jwt_extended CSRF_Token work like this. As a solution for that either disable csrf protection (app.config["JWT_COOKIE_CSRF_PROTECT"] = False) or pass csrf_token through header.