Form Submission with CSRF Tokens

What's the canonical flow for submitting a CSRF-protected form from a scraper?

• APOST directly to the form's action URL
• BGET the form page (which sets a cookie and embeds a token), extract the token, then POST it back with your data
• CDisable CSRF in the request
• DUse a different Authorization header