How do I set up security in a Flask application?

How do I set up security in a Flask application?

To set up security in a Flask application, you can use the Flask-Security extension, which provides authentication, role management, and more.

What are the steps to install Flask-Security?

First, install Flask-Security using pip: pip install Flask-Security. Then, configure it in your Flask app.

Can you show me a basic configuration example?

Sure! Here's a simple example:

from flask import Flask
from flask_security import Security, SQLAlchemyUserDatastore

app = Flask(__name__)
app.config['SECRET_KEY'] = 'super-secret'
app.config['SQLALCHEMY_DATABASE_URI'] = 'sqlite:///app.db'

# Initialize your database and user datastore here

security = Security(app, user_datastore)  

What about password hashing?

Flask-Security automatically hashes passwords using Werkzeug's security utilities. Just ensure you use the register and login forms provided.