Skip to main content

A full featured and secure OAuth provider base

Project description

Flask-OAuthProvider is an extension that makes it easy to secure your views with OAuth:

@provider.require_oauth()
def user_feed(self):
    ...

It gives you fine grained control over access through the use of realms:

@provider.require_oauth(realm="photos")
def user_photos(self):
    ...

As well as the OAuth parameters such as client key and token:

@provider.require_oauth()
def whoami(self):
    return request.oauth.client_key

Note this extension does NOT give you an OAuth client. For that simply use requests which has OAuthLib backed OAuth support built in. If you want to know more about OAuth check out the excellent guide at hueniverse or dig into the very readable OAuth 1 RFC 5849 spec.

Usage

Flask-OAuthProvider builds opon OAuthLib and its OAuth 1 RFC 5849 Server class. You will need to implement a number of abstract methods, required from either Server (OAuthLib) or OAuthProvider(Flask-OAuthProvider). These methods are mainly data storage or retrieval methods. No assumptions are made about the persistence system you use and as such you are free to use any you see fit.

Take a look at the example application for a fully working, SQLite / SQLAlchemy backed OAuth provider in the /examples folder.

While implementing your provider class you want to give OAuthLib Server docs and the OAuthProvider source a thorough read.

When done, it will be easy to secure your API with OAuth:

app = Flask(__name__)
provider = YourProvider(app)

@app.route("/my_secrets")
@provider.require(realm="secrets")
def my_secrets(self):
    ...

Install

Flask-OAuthProvider is easily installed using pip:

pip install flask-oauthprovider

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

flask-oauthprovider-0.1.1.tar.gz (6.8 kB view details)

Uploaded Source

File details

Details for the file flask-oauthprovider-0.1.1.tar.gz.

File metadata

File hashes

Hashes for flask-oauthprovider-0.1.1.tar.gz
Algorithm Hash digest
SHA256 186f7d74d82917377719d39d932a17a8f5dd895d46f3689c4afe1ddd70369850
MD5 e04b4f17ab50aa9d56d279bb3c09112d
BLAKE2b-256 e7201a6bdb2ebf1cd1604a4de5b77d20864554865680931c11f59334df4ff419

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page