How do I use decorators with Flask-JWT-Extended?

How do I use decorators with Flask-JWT-Extended?

You can use decorators in Flask-JWT-Extended to protect your routes. For example, you can use the @jwt_required() decorator to ensure that a user is authenticated before accessing a specific route.

Can you show me a code example?

Sure! Here's a simple example:

from flask import Flask
from flask_jwt_extended import JWTManager, jwt_required

app = Flask(__name__)
app.config['JWT_SECRET_KEY'] = 'your_secret_key'
jwt = JWTManager(app)

@app.route('/protected', methods=['GET'])
@jwt_required()
def protected():
    return {'message': 'This is a protected route!'}

What if I want to add role-based access control?

You can create custom decorators to check user roles. For example:

from flask_jwt_extended import jwt_required, get_jwt_claims

def role_required(role):
    def decorator(fn):
        @jwt_required()
        def wrapper(*args, **kwargs):
            claims = get_jwt_claims()
            if claims['role'] != role:
                return {'msg': 'Access denied'}, 403
            return fn(*args, **kwargs)
        return wrapper
    return decorator