Skip to main content

Quickly add security features to your Flask application.

Project description

https://github.com/Flask-Middleware/flask-security/workflows/tests/badge.svg?branch=master&event=push Coverage! https://img.shields.io/github/tag/Flask-Middleware/flask-security.svg Downloads License Documentation Status https://img.shields.io/badge/code%20style-black-000000.svg pre-commit

Quickly add security features to your Flask application.

Notes on this repo

This is a independently maintained version of Flask-Security based on the 3.0.0 version of the Original

Goals

  • Regain momentum for this critical piece of the Flask eco-system. To that end the the plan is to put out small, frequent releases starting with pulling the simplest and most obvious changes that have already been vetted in the upstream version, as well as other pull requests. This was completed with the June 29 2019 3.2.0 release.

  • Continue work to get Flask-Security to be usable from Single Page Applications, such as those built with Vue and Angular, that have no html forms. This is true as of the 3.3.0 release.

  • Use OWASP to guide best practice and default configurations.

  • Be more opinionated and ‘batteries’ included by reducing reliance on abandoned projects and bundling in support for common use cases.

  • Follow the Pallets lead on supported versions, documentation standards and any other guidelines for extensions that they come up with.

  • Continue to add newer authentication/authorization standards:
    • ‘Social Auth’ integrated (using authlib) (5.1)

    • WebAuthn support (5.0)

    • Two-Factor recovery codes (5.0)

    • First-class support for username as identity (4.1)

    • Support for fresheness decorator to ensure sensitive operations have new authentication (4.0)

    • Support for email normalization and validation (4.0)

    • Unified signin (username, phone, passwordless) feature (3.4)

Contributing

Issues and pull requests are welcome. Other maintainers are also welcome. Unlike the original Flask-Security - issue pull requests against the master branch. Please consult these contributing guidelines.

Installing

Install and update using pip:

pip install -U Flask-Security-Too

Resources

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

Flask-Security-Too-5.3.0.tar.gz (607.4 kB view details)

Uploaded Source

Built Distribution

Flask_Security_Too-5.3.0-py3-none-any.whl (371.2 kB view details)

Uploaded Python 3

File details

Details for the file Flask-Security-Too-5.3.0.tar.gz.

File metadata

  • Download URL: Flask-Security-Too-5.3.0.tar.gz
  • Upload date:
  • Size: 607.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/4.0.2 CPython/3.11.4

File hashes

Hashes for Flask-Security-Too-5.3.0.tar.gz
Algorithm Hash digest
SHA256 9f5d830913eac66f18845795ae5f7d044bdd0d836aeabccfebadab6a29f79354
MD5 17399700b75a822d701fa58d8a4aa0cf
BLAKE2b-256 3d735bb21dbc4bf7c79ebc8b9aecf531a54843a4b2540ec18af6032cfe99a37d

See more details on using hashes here.

Provenance

File details

Details for the file Flask_Security_Too-5.3.0-py3-none-any.whl.

File metadata

File hashes

Hashes for Flask_Security_Too-5.3.0-py3-none-any.whl
Algorithm Hash digest
SHA256 c358893d9de3332e523288e6751b51d354973e25e70b0b4a7ef229eca9f910db
MD5 4965ced3161682a05384a3954774d62a
BLAKE2b-256 6a06590a20e071bd6740c0d3d751e37c26f5f2ef19b0d41aee6a37d06a6bea03

See more details on using hashes here.

Provenance

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page