Flask
Django
FastQLView. Include them under another URL prefix using Django’s normal URL
configuration.
Django’s CSRF policy remains enabled by default. For an API protected by another
explicit mechanism, set csrf_exempt=True and document that security decision in
the host project. FastQL does not disable middleware, authentication, sessions,
or CSRF globally.