flask-security
flask-security copied to clipboard
Quick and simple security for Flask applications
Hi There, Not sure if this should be a discussion or feature request, rather than an issue. I am writing a portion of Flask app, where I would like to...
Is there a way to specify a whitelist of domains that can register? Ideally I'd like only people with email addresses from my organization and maybe a few others to...
This is what all the cool kids are using. bcrypt is still supported - but not recommended. auth_tokens defaults have always been 'no expiration' - that's crazy. This needs to...
When using the JSON api and sending POST /login with a JSON body, adding `csrf_token` as a third key in the body lets you successfully login. Is this as intended?...
FS has supported authentication/authorization via an auth_token for a long time. Over time, there have been quite a few discussions about improvements.. - Allow customized expiration - this is in...
This is for the JSON API. Trying to set up the changeable endpoint, but the endpoint returns a 401 with the message "You are not authenticated. Please supply the correct...
oauth is slightly different than our other authentication mechanisms due to the additional external double redirect. When two-factor is enabled - for login/us-signin/webauthn the JSON response will indicate that a...
Currently, one can overload `Username` text on the register form by doing the following: ``` from flask_security.forms import _default_field_labels from flask_security.utils import _ _default_field_labels["username"] = _("Callsign") ``` The text is...
Hi, It's great that social auth is supported but it would be awesome if users could register with social auth too. I think most websites that support social auth also...
Allows for a new configuration variable to control which subdomains are allowed to be redirected to. Resolves Flask-Middleware/flask-security#983