flask-login

This all depends what your goal is. If your goal is to understand web development then I would say that a micro-framework like Flask is better because you actually have to assemble all the pieces yourself. Moreover, if you're curious about how a given feature is implemented, extension source code is often very accessible. For example, all the business logic in Flask-Login is confined to one ~450 line Python file [1]. Not bad! But one the other hand, if you're trying to create a production-ready service, then Django/Rails probably have fewer risks since they require fewer decisions. Lastly, the book had a very thorough treatment of authentication. I agree that this is a huge pitfall, and I think Miguel introduced and explained the problem extremely well. [1] https://github.com/maxcountryman/flask-login/blob/master/fla...

One tip if you are about to write your first large (well, larger than 500 lines of code) Flask application: check some example applications for ideas of separation/architecture and some popular modules. The minimalist nature of Flask, not forcing you to do things in one way and one way only, gives lots of power, but also lots of chances to mess it up and end up with a totally unmaintainable crap. Great power comes with great responsibility. Personally, I quite liked https://github.com/mattupstate/overholt (although some dependencies are out dated!). Also, having some starting point with the boilerplate code already in place helps you to prototype faster, etc. Speaking of modules, the Flask modules ecosystem is pretty great and familiarizing yourself with it might save plenty of time you'd spend on re-implementing them. Some popular module

SEEKING WORK - Remote or San Francisco I build robust backend systems that serve millions of connections per day, integrate seamlessly with external platforms, and scale to meet demand. I also have some experience building front-ends and the term "full-stack" is applicable to my skill set. I am proficient with the following technologies: * Clojure(Script) - Ring, Datomic, Om * Python - Flask, gevent * MongoDB * PostgreSQL Some of my public work includes maintaining Flask-Login(https://github.com/maxcountryman/flask-login), development of Rauth(https://github.com/litl/rauth), and various other Python and Clojure projects including a Clojure port of Boundary's distributed, decentralized, k-ordered unique IDs. If you'd like to get in touch, please do not hesitate to shoot me an email! I'll be happy to discuss your project with you. Email: ma

Well, except that the login process for Django has a lot more people looking at it, and you know that the parts are going to work together pretty well. For example, Flask-Login (https://github.com/maxcountryman/flask-login/blob/master/fla...) imports md5 and sha1 - not a very good sign. How do I make it use something sane? Well, there's Flask-Bcrypt, which provides bcrypt hashing... except that it makes no mention of Flask-Login or how to integrate it. Flask-Login also doesn't mention Flask-Bcrypt. So... you're back to hacking on or digging into Flask-Login to figure out how it works and making it use Bcrypt or some other hashing algorithm. Wait - I just realised that Flask-Login doesn't handle storing user data or models, or checking passwords, just logging them in. So what do I need for that? Is that Flask-Principal? And just WTH is an