← Flask learning pathFlask · Module 8 of 10
Authentication
Log users in with Flask-Login and secure passwords.
📖 Key ideas
- Hash passwords with werkzeug.security generate_password_hash.
- Check with check_password_hash.
- Flask-Login manages user sessions: login_user, logout_user.
- @login_required protects views; current_user is the user.
- For APIs use tokens (JWT via Flask-JWT-Extended).
💡 Real-life example: Flask-Login is a hotel key card system: once checked in, doors open without showing ID each time.
Flask-LoginSession-based login extension
current_userThe logged-in user
generate_password_hashHashes a password
Flask-JWT-ExtendedJWT auth for APIs