Can we change CSRF token per-form request or even per-request instead of same token for one active session?
Assuming that you have access to the request object:
request
from django.middleware.csrf import rotate_token rotate_token(request)