Skip to main content
This is a pre-production deployment of Warehouse. Changes made here affect the production instance of PyPI (
Help us improve Python packaging - Donate today!

A full featured and secure OAuth provider base

Project Description

Flask-OAuthProvider is an extension that makes it easy to secure your views with OAuth:

def user_feed(self):

It gives you fine grained control over access through the use of realms:

def user_photos(self):

As well as the OAuth parameters such as client key and token:

def whoami(self):
    return request.oauth.client_key

Note this extension does NOT give you an OAuth client. For that simply use requests which has OAuthLib backed OAuth support built in. If you want to know more about OAuth check out the excellent guide at hueniverse or dig into the very readable OAuth 1 RFC 5849 spec.


Take a look at the example application for a fully working, SQLite / SQLAlchemy backed OAuth provider in the /examples folder.

Before running the demo you need to install a few dependencies (virtualenv is highly recommended). This will be replaced by a single line of pip soon…:

$ virtualenv venv
$ source venv/bin/activate
(venv)$ git clone
(venv)$ python oauthlib/ install
(venv)$ git clone
(venv)$ python flask-oauthprovider/ install
(venv)$ pip install flask-openid sqlalchemy

After installing you can run the demo application:

(venv)$ python flask-oauthprovider/examples/


Flask-OAuthProvider builds opon OAuthLib and its OAuth 1 RFC 5849 Server class. You will need to implement a number of abstract methods, required from either Server (OAuthLib) or OAuthProvider(Flask-OAuthProvider). These methods are mainly data storage or retrieval methods. No assumptions are made about the persistence system you use and as such you are free to use any you see fit.

While implementing your provider class you want to give OAuthLib Server docs and the OAuthProvider source a thorough read.

The implementation guide is on its way, feel free to take a look at the overview pictures of how Flask-OAuthProvider and OAuthLib fit into the OAuth workflow.

When you have hacked together a shiny provider class it will be easy to secure your API with OAuth:

app = Flask(__name__)
provider = YourProvider(app)

def my_secrets(self):


Flask-OAuthProvider will be easily installed using pip when OAuthLib 0.2.0 is available on pypi

pip install flask-oauthprovider
Release History

Release History

This version
History Node


History Node


History Node


History Node


Download Files

Download Files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

File Name & Checksum SHA256 Checksum Help Version File Type Upload Date
flask-oauthprovider-0.1.3.tar.gz (7.3 kB) Copy SHA256 Checksum SHA256 Source Jun 27, 2012

Supported By

WebFaction WebFaction Technical Writing Elastic Elastic Search Pingdom Pingdom Monitoring Dyn Dyn DNS Sentry Sentry Error Logging CloudAMQP CloudAMQP RabbitMQ Heroku Heroku PaaS Kabu Creative Kabu Creative UX & Design Fastly Fastly CDN DigiCert DigiCert EV Certificate Rackspace Rackspace Cloud Servers DreamHost DreamHost Log Hosting