Quickly add security features to your Flask application.
Notes on this repo
As of 7/30/2024, the independent fork Flask-Security-Too replaced the archived Flask-Security repo (now called Flask-Security-3.0). This repo is published at PyPI at both Flask-Security and Flask-Security-Too. Please consider changing your requirements file to point to flask-security.
Flask-Security-Too was a fork from the 3.0.0 version of the Original
Pallets Community Ecosystem
This project is part of the Pallets Community Ecosystem. Pallets is the open source organization that maintains Flask; Pallets-Eco enables community maintenance of related projects. If you are interested in helping maintain this project, please reach out on the Pallets Discord server <https://discord.gg/pallets>.
Goals
Use OWASP to guide best practice and default configurations.
Be more opinionated and ‘batteries’ included by reducing reliance on abandoned projects and bundling in support for common use cases.
Follow the Pallets lead on supported versions, documentation standards and any other guidelines for extensions that they come up with.
- Continue to add newer authentication/authorization standards:
‘Social Login (OAuth)’ integrated (using authlib) (5.1)
WebAuthn/Passkey support (5.0)
Two-Factor recovery codes (5.0)
First-class support for username as identity (4.1)
Support for freshness decorator to ensure sensitive operations have new authentication (4.0)
Support for email normalization and validation (4.0)
Unified signin (username, phone, passwordless) feature (3.4)
Two/Multi-Factor authentication supporting SMS, email, authenticator apps (4.0)
Contributing
Issues and pull requests are welcome. Other maintainers are also welcome. Please consult these contributing guidelines.
Installing
Install and update using pip:
pip install -U Flask-Security
Resources
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file flask_security-5.8.2.tar.gz.
File metadata
- Download URL: flask_security-5.8.2.tar.gz
- Upload date:
- Size: 752.5 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
827199c0a7b8a887cca7c96611d586fa61f4b1957fc2f1fb040746549ef3d918
|
|
| MD5 |
877297e93c2c0cd8b7efbefe54a9f59e
|
|
| BLAKE2b-256 |
1e05e16b669e7cdfa0bde4614ea793c94c2fe44e35140c590b273be51970f7cb
|
Provenance
The following attestation bundles were made for flask_security-5.8.2.tar.gz:
Publisher:
publish.yaml on pallets-eco/flask-security
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
flask_security-5.8.2.tar.gz -
Subject digest:
827199c0a7b8a887cca7c96611d586fa61f4b1957fc2f1fb040746549ef3d918 - Sigstore transparency entry: 2428578840
- Sigstore integration time:
-
Permalink:
pallets-eco/flask-security@6fde5dd4d237ff15942c1ef8a03e333a448bd00f -
Branch / Tag:
refs/tags/5.8.2 - Owner: https://github.com/pallets-eco
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yaml@6fde5dd4d237ff15942c1ef8a03e333a448bd00f -
Trigger Event:
push
-
Statement type:
File details
Details for the file flask_security-5.8.2-py3-none-any.whl.
File metadata
- Download URL: flask_security-5.8.2-py3-none-any.whl
- Upload date:
- Size: 493.1 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
8a596eb716cb3bfe041c19a3e8cfdda7ba40035b665e71e7e1f2ffa2afce93bd
|
|
| MD5 |
27e56a83a0b4c8bc0a28536bb2ba3faa
|
|
| BLAKE2b-256 |
ced73dac30411efdbf62f37f55882afd502469a6f27bf72e293b8b4420a0ae12
|
Provenance
The following attestation bundles were made for flask_security-5.8.2-py3-none-any.whl:
Publisher:
publish.yaml on pallets-eco/flask-security
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
flask_security-5.8.2-py3-none-any.whl -
Subject digest:
8a596eb716cb3bfe041c19a3e8cfdda7ba40035b665e71e7e1f2ffa2afce93bd - Sigstore transparency entry: 2428578935
- Sigstore integration time:
-
Permalink:
pallets-eco/flask-security@6fde5dd4d237ff15942c1ef8a03e333a448bd00f -
Branch / Tag:
refs/tags/5.8.2 - Owner: https://github.com/pallets-eco
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yaml@6fde5dd4d237ff15942c1ef8a03e333a448bd00f -
Trigger Event:
push
-
Statement type:
