Possible to make flask login system which doesn't use client-side session/cookie?
With such restrictions as not having zero client side data, you could pass a session token in the GET parameters of every link rendered in the html page.
Or you could create only POST views with a hidden token input (may be more secure indeed).
I'm working on a Flask app to be used by a medical client. Their IT dept is so up tight about security that they disable cookies and scripting network-wide. 
Luckly, wtf-forms was able to address one of these issues with server-side validation of form input. 
However, I'm getting hung up on the login system. I've implemented flask-login, but this apparently requires client-side data as I'm unable to log in when testing in a browser with these features disabled. 
Is there any way to create a login with zero client-side data? 
Thanks for the help.