How can I implement JWT authentication in Flask-RESTful?

How can I implement JWT authentication in Flask-RESTful?

To implement JWT authentication in Flask-RESTful, you can use the Flask-JWT-Extended library. First, install it using pip.

What are the steps to set it up?

1. Install Flask-JWT-Extended. 2. Initialize it in your Flask app. 3. Create a user model and a login route. 4. Use the @jwt_required decorator to protect your routes.

Can you show me a code example?

Sure! Here's a simple example:

from flask import Flask, jsonify, request
from flask_jwt_extended import JWTManager, create_access_token, jwt_required

app = Flask(__name__)
app.config['JWT_SECRET_KEY'] = 'your_secret_key'
jwt = JWTManager(app)

@app.route('/login', methods=['POST'])
def login():
    username = request.json.get('username')
    password = request.json.get('password')
    # Verify username and password
    access_token = create_access_token(identity=username)
    return jsonify(access_token=access_token)

@app.route('/protected', methods=['GET'])
@jwt_required()
def protected():
    return jsonify(msg='This is a protected route')

This code sets up a basic login route and a protected route.

What if I want to add token expiration?

You can set token expiration by configuring the JWT_ACCESS_TOKEN_EXPIRES setting in your Flask app. For example:

from datetime import timedelta
app.config['JWT_ACCESS_TOKEN_EXPIRES'] = timedelta(hours=1)