Authenticating a Flask API Using JSON Web Tokens

[@prettyprinted]

Join my free course on the basics of Flask-SQLAlchemy: prettyprinted.com/flasksql

[@yusufsalk1136]

This is by far the most underrated jsonify pronunciation. Great video by the way. Thanks.

[@pratikrane149]

Neat explanation. Everything straight to the point. Thanks a ton for sharing such quality tutorials! This helped me a lot in understanding jwt

[@prettyprinted]

I'm glad I could help.

[@marcoio8742]

Terrific! This is super useful. 3 years later, thank you

[@noletovictor]

Perfect! That is exactly what I need! Thank you for this simple, fast and easy solution!

[@prettyprinted]

Glad it helped!

[@笨土豆]

Thx for this video, i have learned several JWT video tutorial on youtube. Your video is most clear i ever seen these days. Very helpful thx

[@AnikSardar]

Best video on authentication. Extremely well explained.

[@WilliamRosswpr101]

Thanks for sharing this. It has been a huge help towards understanding JWT in Python

[@prettyprinted]

You're welcome! Thanks for watching.

[@koodauskanava9096]

Always use 401 for unauthenticated routes. 403 is forbidden logic, for example forbidden directory listing etc. Not related to authentication.

[@prettyprinted]

Thanks! I should have looked those up before recording the video. I always get them confused.

[@mbonuchinedu2420]

ANOTHER LIFE SAVER...... More blessing to you..................

[@prettyprinted]

Thanks for watching! Join the hundreds of others who have taken my Flask courses on prettyprinted.com

[@stanleyjohn4670]

Can you show how to use JWT in Django? It's a sincere request, thank you.

[@TeddyAndersson95]

So excited, to watch this! I also 100% sure you will deliver another awesome tutorial :D

[@prettyprinted]

I try my best!

[@JulienPy]

Still your great and step-by-step approach style. Very appreciated!

[@prettyprinted]

I'm glad you enjoyed it!

[@BRBallin1]

Great introduction. Made a somewhat intimidating topic seem straightforward

[@prettyprinted]

Glad the video helped! Thanks for watching.

[@koodauskanava9096]

Very good tutorial. Useful stuff!

[@Leo-fh7fu]

another beautiful video, thanks for sharing my friend, subscribed!!

[@ThaEzioAuditore]

Thank you thank you thank you a million times ! your efforts are very much appreciated

[@prettyprinted]

You're welcome! And I appreciate you for taking the time to watch.

[@techsteering]

Thanks a lot! This is exactly what I was looking for. You saved me tons of time. Thanks again. :)

[@vic_shine]

Many thanks, Anthony! Brain storage was improved :)

[@prettyprinted]

You're welcome! Thanks for watching.

[@v4ldevrr4m47]

The best simple example. thanks

[@rakeshingle]

Thank you, This helped me a lot.

[@andrewbartlett2091]

Really clear, very informative, thanks a lot

[@prettyprinted]

You're welcome! Thanks for watching.

[@somed_9216]

It was really helpful, thank you

[@orlapa]

Excelente tutorial, this is useful for someone starting with this. Thanks

[@saguoran]

2019, I found this video is useful. good contents.

[@prettyprinted]

I'm glad you like. Thanks for watching!

[@mellimelloweb]

Thanks Anthony for your excellent work. Can you complete this video with the implementation of refresh token? That would be very great!

[@СергейНаталенко-х2х]

Огромное спасибо Ваше видео очень помогло мне в работе) Thank you very much!!!

[@shreevidyas.r8275]

Thankyou for this wonderful video... Now am able to know how to create token and storing them...Can you please provide the video on requesting using that token from that moment on.

[@carloseduardodasilvaolivei8939]

Thank you very much this video helped me a lot

[@zzakpk]

very helpful tutorial. Thank you.

[@ikhsanrahman9703]

cool, how about for refresh token. that happen when we try to keep user remain login inside

[@christianduahmarfo5283]

How was the `prompt screen` possible? Did you use HTML for the Login form?

[@Tbalbiza_POV]

Thank you, very helpful !!!!!!!!!!!!!!!!!

[@prettyprinted]

You're welcome! Thanks for watching.

[@charlieontheearth]

Thanks for this video. It's very helpful for me.

[@prettyprinted]

You're welcome! Thanks for watching.

[@XBoysGaming22]

This is nice! Great video!

[@prettyprinted]

Thanks for watching!

[@dhyanprasad5611]

nice video. wanted to add that when i tried to authenticate the token using a header, I got back invalid token because I didnt specify the decode algorithm

[@PulkitKumar191]

Great tutorial. Thanks!

[@prettyprinted]

Thanks, I appreciate it!

[@fahrican9708]

great video thanks!

[@george4061]

thank you sir!

[@gggal123]

Awesome Awesome Awesome Awesome Awesome Awesome Awesome tutorial.

[@code_tech01]

Thanks to explain

[@r5bc]

Hi, very helpful video. Please can you put the link to the video that follows this one in this flask api cours ?

[@nicolascorrea1989]

you're the best !

[@abhaychinchole3482]

i am getting invalid token despite of copying the token...help will be appreciated

[@selman8653]

Thanks mate

[@eriklee1131]

Great video!

[@prettyprinted]

Thanks for watching!

[@Maslacak1985]

any guess with : RuntimeError: Working outside of request context. This typically means that you attempted to use functionality that needed an active HTTP request. Consult the documentation on testing for information about how to avoid this problem.

[@paballo694]

Did you manage to solve this?

[@sosajacobb7973]

when returning decorated make sure its return decorated, not return decorated()

[@raghu11220]

Nice man.. your doing great job.. its possible to make video on Keycloak with flask or django.. looking forward to hear from you

[@ayyapanr]

Great Tutorial! Works on the browser and postman.. but when I try Python3 requests, I get 401 back.. wireshark captures look similar.. anyways do we need to consider some encoding when we use Python3 clients?

[@prettyprinted]

You may have to. I'll have to test this out with calling from Python.

[@danielfernandomurciaperdom7665]

thank you so much

[@robertwoodard8462]

The jwt decode always throws an exception to token is invalid. It's passing the correct token, checked with a print, but it doesn't seem to like it. *UPDATE* you now have to pass the algorithm to decode the jwt token with as a list

[@robertkl5261]

thank you very much, had the same error and your comment saved me a lot of time :)

[@animeshmisra5387]

Thanks! man

[@satriyaningjagat]

data = jwt.decode(token, app.config['SECRET_KEY'], algorithms= ['HS512', 'HS256'])

[@TusharBhut-mk6mn]

Can you make video on individual authentication for user and admin, where user authorized can use only [GET] method, while admin authorized can use [crud] methods.

[@fly50789]

I am not sure about what is the different about flask-jwt-extend and flask-login? Which is better?

[@petrk.4901]

Hello, I would like to thank you for the videos you make are very beneficial for me. I wanted to ask you if you could create user roles using token_required. In this video, you used the feature only to reveal content for the logged-in user. Couldn't the functionality be extended to user roles? For example, Admin would have read, write, user read only, or other read only for some content. I want to create user roles. Thank you

[@SanuKumar_addicted_brat]

Thanks for sharing such a great video, can you also help me with the logout?

[@hsz7338]

Thank you for putting amazing tutorials together. I was wondering if you could make a video on Flask or Flask_restplus uses Oauth2? Thank you.

[@prettyprinted]

I'll consider that. Thanks for the idea and for watching.

[@rienadetrof6198]

Hello , how do you get the pop up to sign in? Great video btw!

[@LatinDanceVideos]

this is the section of code that generates the pop box to sign in. maybe try using chrome incognito window. as the standard chrome caching introduces confounding behaviour. def login(): print("def login()") auth = request.authorization print("auth:", auth)

[@mrsterbenblack9270]

Very nice.

[@prettyprinted]

Thanks for watching!

[@hrishinani]

Hi very clean explanation of the code but I'm unable to get output due to this line try: data = jwt.decode(token, app.config['SECRET_KEY']) any resolution for this please...

[@jacksonjegatheesan5045]

hi nice tutorial by the way how would i log out and how can i send login credentials from my front end

[@KotoFF4ik]

Awesome

[@Kinyanjui_765]

hey if you see this...can make a video about how you can link this up with vanilla javascript? thank you

[@madhavparikh9653]

Really liked the explanation !!!. Still, it directly not verified and does not display any prompt to enter username and password. Anyone know why?

[@KillerCookie]

Thanks for a great tutorial! However, the link to the code seems to be broken, might want to fix it.

[@Brunovtf]

Can you add LOGOUT route? For cleaning the Token

[@anusham4559]

I am new to python and its Very helpful. Can you let me know how to pass a parameter to 'protected' function along with token?

[@prettyprinted]

Could you be more specific? What are you trying to accomplish?

[@anusham4559]

never mind. I got it working. I actually had an input parameter to the function and passing token along with input parameter was not working. But the issue was I was not calling it properly. Its working now. Thanks!

[@twishasahay3178]

Hi i dont know why but the auth =request.authorization is not working for me. I am not getting the notification to fill in the username/password. I am getting the could not verify response. do i have to install any library other than the ones mentioned in the video or change any settings

[@danieldaschle]

THANKS

[@prettyprinted]

You're welcome! Thanks for watching.

[@ambeshsingh1251]

very nice video. After hiting the login url for the first time it asks for username and password but after that it does not ask for it and directly gives the token. can u help me how it should ask for user-id and password everytime login API is hit..

[@FlexThoseMuscles]

I encountered problems while running, it always says no module name jwt so I did steps below: make sure to upgrade flask to the last version with : pip3 install flask uninstall jwt with: pip3 uninstall jwt install pyjwt with: pip3 install pyjwt

[@FlexThoseMuscles]

thanks for the like! Our teacher is sending his students on your tutorial (see: jberger.org/ on the twitter feed). Best luck with the premium courses and the tutoring.

[@Ekosusiloharjo]

Hi Anthony Get the code here not found

[@kingleo188]

Thank you very much for the great video, Very well explained. Although I have stumbled at 17:49, Even though I have added the token in the URL, I got a "token is invalid" json response, Please help, I have gone through and copied your code as it is, But not sure where I went wrong.

[@gustavocarnaval6622]

Try to specify the algorithm on the decode function of JWT.

[@selimduvakl6807]

ı have the same problem. Did you be able to solve it?

[@ComputerScience101]

Hi , I have created database using sqlite, how do i access the data here for credentials

[@rizwanrizwan4176]

how can i validate the different type of user like admin can view everything but user must restricted to see something? and also how to write security code for form data ?

[@asgaraliyev8740]

is that request being restful request by the secret key now?

[@fogcc1015]

but how automatically pass this token in all request ? Is that THE question !!!

[@kmishy]

Great explanation sir but title is misguiding because you have not used any API

[@castro_hassler]

What is the difference between doing this, and using the flask session object?

[@castro_hassler]

Just in the first case the clients does manage the request token to access the server, and in the other case the server allows a client based on a Cookie session, which one is better? Scalability seems to be in troubles when the server is the one who manage the permissions 'cause it has to maintain a state, but when is it a good idea to use, I mean the flask session object ¿

[@____R__]

After hitting login api for first time it asks for username and password. But after that it does not ask and direct given new token . Can u help me how it should ask userid and password every time login api is hit.

[@animeshmishra4282]

If i am making a website that uses this api but i want users to surf the website but not that api then what should i do ? 😩

[@MegaFeel1]

Hey bro! But where is the code from this video? "Get the code here" page give me 404 error

[@Coristo05]

Hi, i've got problem with request.authentication cause it's NoneType object. How should I fix it?

[@corollayanki]

it's request.authorization, but you probably figured that out by now.

[@surajthapa5688]

Can anyone provide a link for a next video please?

[@lovneetchugh8063]

I am getting this error return jsonify({'token' : token.decode('UTF-8')}) AttributeError: 'str' object has no attribute 'decode'

[@FailedSquare]

Read the error message. Its telling you token is already a string type. In his example, on an older version of jwt it returned a byte type. Which is why the decode was needed for his example. return jsonify({'token': token})

[@anishupadhyay898]

hi when with the valid token obtained from login page still I get the message as token is missing.. can someone please help me with this

[@naveengoyal5243]

Can you please help me, that how should I go to the protected view without copy pasting the token manually and only using the python code.

[@prettyprinted]

You can use the library requests and authenticate that way.

[@aloysiusseow9774]

request.authorization does not show a pop up authentication on my web browser pls help!

[@shivanshjayara6372]

why pop up window for login is not opening. Can any one please tell me that. Any html template needed for that?

[@asimhafeezz]

is it flask-jwt installed?? becuz it says no library exists when i try to install jwt...

[@corollayanki]

the package is called pyjwt, so you do: pip install pyjwt

[@moiarmio4863]

how to use it own my website rather than local host ?

[@mahdihoseyni3661]

how can get refresh token in this case?

[@milindchavan4329]

this video belongs to which play list ? coz i want cover the whole topic ? plz suggest #PrettyPrinted

[@sunilsolanki5043]

how to pass token directly to another api?

[@biunircloud6432]

Someone could share link the next video? Thanks

[@sunilsolanki5043]

where the data variable is used?

[@priteshthaker8340]

Get the code link doesn't work

[@georgegoldmanonyedikachijo9330]

while trying to implement this i got TypeError: 'module' object is not callable Traceback (most recent call last) File "/home/lb/Documents/trie/venv/lib/python3.8/site-packages/flask/app.py", line 2464, in __call__ return self.wsgi_app(environ, start_response) File "/home/lb/Documents/trie/venv/lib/python3.8/site-packages/flask/app.py", line 2450, in wsgi_app response = self.handle_exception(e) File "/home/lb/Documents/trie/venv/lib/python3.8/site-packages/flask/app.py", line 1867, in handle_exception reraise(exc_type, exc_value, tb) File "/home/lb/Documents/trie/venv/lib/python3.8/site-packages/flask/_compat.py", line 39, in reraise raise value File "/home/lb/Documents/trie/venv/lib/python3.8/site-packages/flask/app.py", line 2447, in wsgi_app response = self.full_dispatch_request() File "/home/lb/Documents/trie/venv/lib/python3.8/site-packages/flask/app.py", line 1952, in full_dispatch_request rv = self.handle_user_exception(e) File "/home/lb/Documents/trie/venv/lib/python3.8/site-packages/flask/app.py", line 1821, in handle_user_exception reraise(exc_type, exc_value, tb) File "/home/lb/Documents/trie/venv/lib/python3.8/site-packages/flask/_compat.py", line 39, in reraise raise value File "/home/lb/Documents/trie/venv/lib/python3.8/site-packages/flask/app.py", line 1950, in full_dispatch_request rv = self.dispatch_request() File "/home/lb/Documents/trie/venv/lib/python3.8/site-packages/flask/app.py", line 1936, in dispatch_request return self.view_functions[rule.endpoint](**req.view_args) File "/home/lb/Documents/trie/application/admin/routes/auth.py", line 20, in unprotected token = jwt({'user': auth.username, 'exp': datetime.datetime.utcnow() + datetime.timedelta(minutes=30)}, app.secret_key) TypeError: 'module' object is not callable

[@artisole3304]

same bro same error

[@SwapnilSudhir47]

Hi , I am trying to login in the first login function, but it is again showing the login popup, even after credentials. Please help

[@prettyprinted]

Even if you use the code I've linked to in the description?

[@SwapnilSudhir47]

Its done...found a different approach.

[@ayah5896]

@@SwapnilSudhir47 I have got the same issue. Can you please tell me how did you solve it? Thanks

[@SwapnilSudhir47]

@@ayah5896 I might have forgotten what i was doing, but can you please check in the console network, what issue is there, I can help :-)

[@uripeled2]

How the the token is saved?

[@TheNorthRemember]

Great tutorial, can you please give me the syntax theme

[@prettyprinted]

Thanks. I just use the default one in Sublime Text 3.