Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Already on GitHub? Sign in to your account

Document Auth&Auth #183

Closed
mitsuhiko opened this Issue Feb 17, 2011 · 7 comments

Comments

Projects
None yet
6 participants
Owner

mitsuhiko commented Feb 17, 2011

People seem to be put off by the lack of auth&auth in Flask. Just because it's not there it does not mean it's hard. Documentation should show an example, maybe with Flask-SQLAlchemy.

Related feedback issues:

That resonates with me and what people new to flask often say. I would not narrow it down to one database backend though. Maybe it's reasonable to show how it's done with a relational (e.g. Postgres) and a non-relational database (e.g. MongoDB).

Authorization is in the documentation though it's not called that. The example code for View Decorators gives a good, simple example of the typical authorization task: restricting access to views based on authenticated data, and redirecting an errant request to an authenticating page of some kind.

There is an Authentication section in the snippets gallery, though I didn't notice the snippets until long after I'd written a few Flask apps.

I think there is a veriaty of good extensions out there that handles this problem great and supplies good example code.

Would it be a bad idea to put in links to some of the most common used extentions in the docs?
If something specific is needed lets write up an example and link to that instead. I already have an oauth auth example repo https://github.com/brunsgaard/yoloAPI. I could make another targeted the more generel audience using sqlalchemy and flask-login/custom decorators if that is what is needed to close this issue.

Would that have any interest?

Owner

untitaker commented Sep 29, 2014

This is also related to pocoo/metaflask#47. We do have the Flask extension site and more recently https://github.com/pocoo/powered-by-flask.

Member

jeffwidman commented Jun 3, 2016

Auth is part of the current tutorial and some general pointers toward security extensions were added in #1854

@jeffwidman jeffwidman closed this Jun 3, 2016

Owner

untitaker commented Jun 4, 2016

this issue was about auth&auth (which seems to be an ebay-thing?), but I don't know if it's relevant anymore.

Member

jeffwidman commented Jun 6, 2016

Ah, I didn't realize auth&auth was a specific authentication implementation... agree though, it doesn't really seem to be a thing anymore.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment