Doing the OAuth dance with style using Flask, requests, and oauthlib
Project description
Flask-Dance 
Doing the OAuth dance with style using Flask, requests, and oauthlib. Currently, only OAuth consumers are supported, but this project could easily support OAuth providers in the future, as well. The full documentation for this project is hosted on ReadTheDocs, but this README will give you a taste of the features.
Installation
Just the basics:
$ pip install Flask-DanceOr if you’re planning on using the SQLAlchemy backend:
$ pip install Flask-Dance[sqla]Quickstart
For a few popular OAuth providers, Flask-Dance provides pre-set configurations. For example, to authenticate with GitHub, just do the following:
from flask import Flask, redirect, url_for
from flask_dance.contrib.github import make_github_blueprint, github
app = Flask(__name__)
app.secret_key = "supersekrit"
blueprint = make_github_blueprint(
client_id="my-key-here",
client_secret="my-secret-here",
)
app.register_blueprint(blueprint, url_prefix="/login")
@app.route("/")
def index():
if not github.authorized:
return redirect(url_for("github.login"))
resp = github.get("/user")
assert resp.ok
return "You are @{login} on GitHub".format(login=resp.json()["login"])
if __name__ == "__main__":
app.run()NOTE: For this example to work, you must first register an application on GitHub to get a client_id and client_secret. The application’s authorization callback URL must be http://localhost:5000/login/github/authorized. You’ll also need to set the OAUTHLIB_INSECURE_TRANSPORT environment variable, so that oauthlib allows you to use HTTP rather than HTTPS.
The github object is a context local, just like flask.request. That means that you can import it in any Python file you want, and use it in the context of an incoming HTTP request. If you’ve split your Flask app up into multiple different files, feel free to import this object in any of your files, and use it just like you would use the requests module.
You can also use Flask-Dance with any OAuth provider you’d like, not just the pre-set configurations. See the documentation for how to use other OAuth providers.
Backends
By default, OAuth access tokens are stored in Flask’s session object. This means that if the user ever clears their browser cookies, they will have to go through the OAuth dance again, which is not good. You’re better off storing access tokens in a database or some other persistent store, and Flask-Dance has support for swapping out the storage backend. For example, if you’re using SQLAlchemy, just set it up like this:
from flask_sqlalchemy import SQLAlchemy
from flask_dance.consumer.backend.sqla import OAuthConsumerMixin, SQLAlchemyBackend
db = SQLAlchemy()
class User(db.Model):
id = db.Column(db.Integer, primary_key=True)
# ... other columns as needed
class OAuth(db.Model, OAuthConsumerMixin):
user_id = db.Column(db.Integer, db.ForeignKey(User.id))
user = db.relationship(User)
# get_current_user() is a function that returns the current logged in user
blueprint.backend = SQLAlchemyBackend(OAuth, db.session, user=get_current_user)The SQLAlchemy backend seamlessly integrates with Flask-SQLAlchemy, as well as Flask-Login for user management, and Flask-Cache for caching.
Full Documentation
This README provides just a taste of what Flask-Dance is capable of. To see more, read the documentation on ReadTheDocs.
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distributions
File details
Details for the file Flask-Dance-0.6.0.tar.gz.
File metadata
- Download URL: Flask-Dance-0.6.0.tar.gz
- Upload date:
- Size: 1.1 MB
- Tags: Source
- Uploaded using Trusted Publishing? No
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | deceb7b0039d979ba0a4909da748b68b6fc2f7e6348f196cafc8dc1feeba3f82 |
|
| MD5 | 489b7cac6d86e6a87b77eec17d0d83f4 |
|
| BLAKE2b-256 | 0b3a265d5c94a7912bb1770bee30bb604d9aab95896fe240e7a2c74248964117 |
Provenance
File details
Details for the file Flask_Dance-0.6.0-py2.py3-none-any.whl.
File metadata
- Download URL: Flask_Dance-0.6.0-py2.py3-none-any.whl
- Upload date:
- Size: 30.3 kB
- Tags: Python 2, Python 3
- Uploaded using Trusted Publishing? No
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | bcd47624350c54f41ada202d6052590d01b61c046f77ba5f96883c3a5876f86f |
|
| MD5 | 42d572545519e3d4a24c1461a2ce31a4 |
|
| BLAKE2b-256 | af5026106914450a845cbd645939185a6cec8785878809ad33a89ab85e6be8c6 |
Provenance
File details
Details for the file Flask_Dance-0.6.0-py2.7.egg.
File metadata
- Download URL: Flask_Dance-0.6.0-py2.7.egg
- Upload date:
- Size: 61.8 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | e5200eb9c9b52341f9669245bc4f86e7bd0b9feb73e53300b78101123570532d |
|
| MD5 | 6eb9a4cdaa824ce4e8afd435cd706c38 |
|
| BLAKE2b-256 | 7ec1238bb5962f328ab23477945662abf95a65a7b6ba818fa252ea5a4d22ad3f |
