How can I implement session-based authentication in Flask?

How can I implement session-based authentication in Flask?

To implement session-based authentication in Flask, you can use the Flask-Session extension. First, install it using pip.

What are the steps to set it up?

1. Install Flask-Session. 2. Configure your app to use sessions. 3. Create login and logout routes. 4. Store user information in the session.

Can you show me a code example?

Sure! Here's a simple example:

from flask import Flask, session, redirect, url_for, request
from flask_session import Session

app = Flask(__name__)
app.config['SESSION_TYPE'] = 'filesystem'
Session(app)

@app.route('/login', methods=['POST'])
def login():
    session['user_id'] = request.form['user_id']
    return redirect(url_for('home'))

@app.route('/logout')
def logout():
    session.pop('user_id', None)
    return redirect(url_for('home'))

What should I do to secure the session?

To secure the session, ensure you set a strong secret key, use HTTPS, and consider setting session expiration.