Skip to main content

Doing the OAuth dance with style using Flask, requests, and oauthlib

Project description

Flask-Dance Build status Test coverage Latest Version Documentation

Doing the OAuth dance with style using Flask, requests, and oauthlib. Currently, only OAuth consumers are supported, but this project could easily support OAuth providers in the future, as well. The full documentation for this project is hosted on ReadTheDocs, but this README will give you a taste of the features.

Installation

Just the basics:

$ pip install Flask-Dance

Or if you’re planning on using the built-in SQLAlchemy support:

$ pip install Flask-Dance[models]

Quickstart

For a few popular OAuth providers, Flask-Dance provides pre-set configurations. For example, to authenticate with Github, just do the following:

from flask import Flask, redirect, url_for
from flask_dance.contrib.github import make_github_blueprint, github

app = Flask(__name__)
blueprint = make_github_blueprint(
    client_id="my-key-here",
    client_secret="my-secret-here",
    redirect_to="index",
)
app.register_blueprint(blueprint, url_prefix="/login")

@app.route("/")
def index():
    if not github.authorized:
        return redirect(url_for("github.login"))
    resp = github.get("/user")
    assert resp.ok
    return "You are @{login} on Github".format(login=resp.json()["login"])

The github object is a context local, just like flask.request. That means that you can import it in any Python file you want, and use it in the context of an incoming HTTP request. If you’ve split your Flask app up into multiple different files, feel free to import this object in any of your files, and use it just like you would use the requests module.

You can also use Flask-Dance with any OAuth provider you’d like, not just the pre-set configurations. See the documentation for how to use other OAuth providers.

Token Storage

By default, OAuth access tokens are stored in Flask’s session object. This means that if the user ever clears their browser cookies, they will have to go through the OAuth flow again, which is not good. You’re better off storing access tokens in a database or some other persistent store. If you’re using SQLAlchemy, it’s easy: just pass your database model and session to the blueprint. Flask-Dance even comes with a mixin to help you define your database model, and it works with User models, too!

from flask_sqlalchemy import SQLAlchemy
from flask_dance.models import OAuthMixin

db = SQLAlchemy()

class User(db.Model):
    id = db.Column(db.Integer, primary_key=True)
    # ... other columns as needed

class OAuth(db.Model, OAuthMixin):
    user_id = db.Column(db.Integer, db.ForeignKey(User.id))
    user = db.relationship(User)

# get_current_user() is a function that returns the current logged in user
blueprint.set_token_storage_sqlalchemy(OAuth, db.session, user=get_current_user)

Flask-Dance can seamlessly integrate with Flask-SQLAlchemy for database integration, Flask-Login for user management, and Flask-Cache for caching. However, none of these other extensions are required. You don’t even have to use SQLAlchemy at all; if you’d prefer to use a different storage system, writing a custom integration is easy. See the documentation for how to use other token storage systems.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

Flask-Dance-0.2.2.tar.gz (832.5 kB view details)

Uploaded Source

Built Distributions

Flask_Dance-0.2.2-py2.py3-none-any.whl (18.1 kB view details)

Uploaded Python 2 Python 3

Flask_Dance-0.2.2-py2.7.egg (32.5 kB view details)

Uploaded Source

File details

Details for the file Flask-Dance-0.2.2.tar.gz.

File metadata

  • Download URL: Flask-Dance-0.2.2.tar.gz
  • Upload date:
  • Size: 832.5 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No

File hashes

Hashes for Flask-Dance-0.2.2.tar.gz
Algorithm Hash digest
SHA256 713401287b92f0ba407999f5c1b762d354ee7c2bfdaed38b22c43beaf45bec8a
MD5 6dcb416dadf0743b7f85c81bc1b7fd97
BLAKE2b-256 88649861808254c0f1bd183f6db3bf6068287e43e4c290dd50a1f5dcf3bfb91d

See more details on using hashes here.

Provenance

File details

Details for the file Flask_Dance-0.2.2-py2.py3-none-any.whl.

File metadata

File hashes

Hashes for Flask_Dance-0.2.2-py2.py3-none-any.whl
Algorithm Hash digest
SHA256 c9d3bff76ced89c869a52f573f28883b97f5a75dd72a44605f141b984aa6f8f5
MD5 2787b79681eab3d36cc00800a32136c5
BLAKE2b-256 8982c8117cf66d08940b667cd0b4f2ce8bbab4e80ab3b57c3a0b20cb776fdd96

See more details on using hashes here.

Provenance

File details

Details for the file Flask_Dance-0.2.2-py2.7.egg.

File metadata

File hashes

Hashes for Flask_Dance-0.2.2-py2.7.egg
Algorithm Hash digest
SHA256 59542d5c163a1599965e40c82b29779a7a591e87f8bbcfa60a73ae6438283715
MD5 a283f0b3eb5360ec5e728ddc753a378f
BLAKE2b-256 fbba96ccd28cca6367b203d1d5de1972201bb0dbf2e9e89c9d281ccd2ac6767d

See more details on using hashes here.

Provenance

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page