# -*- coding: utf-8 -*-
"""Flask 扩展实例（避免循环导入，统一在此初始化）。"""
from flask_sqlalchemy import SQLAlchemy
from flask_migrate import Migrate
from flask_login import LoginManager
from flask_wtf import CSRFProtect

db = SQLAlchemy()
migrate = Migrate()
login_manager = LoginManager()
login_manager.login_view = "admin.login"
login_manager.login_message = "请先登录"
login_manager.login_message_category = "warning"

csrf = CSRFProtect()  # 后台 session 表单 CSRF 防护（/api/ JWT 路由在 app factory 里 exempt）