flask-security icon indicating copy to clipboard operation
flask-security copied to clipboard

Quick and simple security for Flask applications

Results 32 flask-security issues
Sort by recently updated
recently updated
newest added

Hi There, Not sure if this should be a discussion or feature request, rather than an issue. I am writing a portion of Flask app, where I would like to...

Is there a way to specify a whitelist of domains that can register? Ideally I'd like only people with email addresses from my organization and maybe a few others to...

bug

This is what all the cool kids are using. bcrypt is still supported - but not recommended. auth_tokens defaults have always been 'no expiration' - that's crazy. This needs to...

enhancement

When using the JSON api and sending POST /login with a JSON body, adding `csrf_token` as a third key in the body lets you successfully login. Is this as intended?...

FS has supported authentication/authorization via an auth_token for a long time. Over time, there have been quite a few discussions about improvements.. - Allow customized expiration - this is in...

enhancement

This is for the JSON API. Trying to set up the changeable endpoint, but the endpoint returns a 401 with the message "You are not authenticated. Please supply the correct...

need test case

oauth is slightly different than our other authentication mechanisms due to the additional external double redirect. When two-factor is enabled - for login/us-signin/webauthn the JSON response will indicate that a...

bug

Currently, one can overload `Username` text on the register form by doing the following: ``` from flask_security.forms import _default_field_labels from flask_security.utils import _ _default_field_labels["username"] = _("Callsign") ``` The text is...

Hi, It's great that social auth is supported but it would be awesome if users could register with social auth too. I think most websites that support social auth also...

enhancement

Allows for a new configuration variable to control which subdomains are allowed to be redirected to. Resolves Flask-Middleware/flask-security#983