6. Securing Your App | Mastering Flask

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

Mastering Flask

By : Jack Stouffer

3.6 (25)

Mastering Flask

3.6 (25)

By: Jack Stouffer

Overview of this book

Starting from a simple Flask app, this book will walk through advanced topics while providing practical examples of the lessons learned. After building a simple Flask app, a proper app structure is demonstrated by transforming the app to use a Model-View-Controller (MVC) architecture. With a scalable structure in hand, the next chapters use Flask extensions to provide extra functionality to the app, including user login and registration, NoSQL querying, a REST API, an admin interface, and more. Next, you’ll discover how to use unit testing to take the guesswork away from making sure the code is performing as it should. The book closes with a discussion of the different platforms that are available to deploy a Flask app on, the pros and cons of each one, and how to deploy on each one.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. Getting Started

1. Getting Started

Version control with Git

Python package management with pip

Dependency sandboxing with virtualenv

The beginning of our project

Summary

2. Creating Models with SQLAlchemy

2. Creating Models with SQLAlchemy

Setting up SQLAlchemy

Our first model

CRUD

Relationships between models

The convenience of SQLAlchemy sessions

Database migrations with Alembic

Summary

3. Creating Views with Templates

3. Creating Views with Templates

Jinja's syntax

Creating our views

Flask WTForms

Summary

4. Creating Controllers with Blueprints

4. Creating Controllers with Blueprints

Request setup, teardown, and application globals

Error pages

Class-based views

Blueprints

Summary

5. Advanced Application Structure

5. Advanced Application Structure

The project as a module

Application factories

Summary

6. Securing Your App

6. Securing Your App

Setting up

Using the session

Flask Login

Summary

7. Using NoSQL with Flask

7. Using NoSQL with Flask

Types of NoSQL databases

RDBMS versus NoSQL

MongoDB in Flask

Leveraging the power of NoSQL

Summary

8. Building RESTful APIs

8. Building RESTful APIs

What is REST

Setting up a RESTful Flask API

GET requests

POST requests

PUT requests

DELETE requests

Summary

9. Creating Asynchronous Tasks with Celery

9. Creating Asynchronous Tasks with Celery

What is Celery?

Setting up Celery and RabbitMQ

Creating tasks in Celery

Running Celery tasks

Monitoring Celery

Creating a reminder app

Creating a weekly digest

Summary

10. Useful Flask Extensions

10. Useful Flask Extensions

Flask Script

Flask Debug Toolbar

Flask Cache

Flask Assets

Flask Admin

Flask Mail

Summary

11. Building Your Own Extension

11. Building Your Own Extension

Creating a YouTube Flask extension

Modifying the response with Flask extensions

Summary

12. Testing Flask Apps

12. Testing Flask Apps

What are unit tests?

How does testing work?

Unit testing the application

User interface testing

Test coverage

Test-driven development

Summary

13. Deploying Flask Apps

13. Deploying Flask Apps

Deploying on your own server

Deploying on Heroku

Deploying on Amazon web services

Summary

Index

Index

Setting up

Before we jump right into making a user authentication system, there is a lot of setup code. To run any type of authentication, our app will need the following elements common to all:

First, the user models will need proper password hashing
Second, a login form and a registration form will be needed to validate user input
Third, a login view and a registration view with templates for each will be needed
Fourth, various social logins need to be set up in order to tie them into the login system when it is implemented

Updating the models

Until now, our users had their passwords stored as a plain text in the database. This is a major security flaw. If any malicious user were to gain access to the data in the database, they could log in to any account. The fallout of such a breach would be greater than our site. Large amounts of people on the Internet use a common password for many sites.

If an attacker had access to an e-mail and password combination, it is very likely that this information...

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Mastering Flask

Search

Your notes and bookmarks