User Authentication in Flask App using JWT [ JSON Web Token ]

[@robmartin7873]

Thank you for explaining this. Your tutorial is exactly the bare bones explanation that I needed. Please keep up the great work.

[@BekBrace]

Thanks Rob, appreciate that 🙏

[@robmartin7873]

@@BekBrace Do you have the time to make a follow up video to this where you do something on the server side with the JWT token? Maybe have different pages that are accessible for different user tokens?

[@erickhualla8092]

Such a good explanation! I'll try this with my API

[@leonkennedy6726]

Thanks man for the clear explanation

[@eduardogil1775]

Excellent tutorial, it cannot be explained more clearly. Thanks for sharing! 😎👍🏼

[@BekBrace]

Great 👍 Thanks Eduardo

[@uuuuuhhlettuce3909]

The goal of jwts is to work stateless. By using sessions in your program, you're not moving away from the "traditional approach". What you're doing is just Server-side sessions...with extra steps....

[@BekBrace]

Bravo 👏 Great comment 🤣

[@yukinorhiko7388]

Great job

[@dipnarayansen4751]

Thanks a lot for this video. Cleared a lot of doubts. really greatfull....

[@BekBrace]

Thanks a lot for your kind comment my friend

[@lakshman587]

That was very Awesome explanation!! Thanks alot for the video!

[@BekBrace]

Thank you. Much appreciated 👍

[@aymenalitaleb9658]

Very instructive, thank you man !

[@BekBrace]

Thank you for watching Aymen 🙏🙂

[@frenches1995]

Hey this might be a beginner question: Don't you need to have some sort of a database as well to store their hashed password and the username and stuff...

[@BekBrace]

That's a great question and the answer is yes, a DBMS would be required for data persistence, however my focus in this tutorial was only to user auth using JWTs

[@frenches1995]

@@BekBrace I worked on my personal project (where I'm trying to implement jwt in it) and to better understand I worked with your provided github code in the video description. And I'd just like to inform you that it didn't fully run but I managed to fix it with the help of chatGPT!

[@liloflorida752]

Useful tutorial, thank you! Does it work with aything?

[@BekBrace]

In general yes it does

[@juancalvera378]

Thanks for the tutorial. What happens in the end with the /public and /auth routes?

[@juancalvera378]

btw, I'm getting an error at the request/args.get('token')

[@BekBrace]

I did not get the end quite right for the mass, should be authenticated with the token -

[@UttamSingh-ei3kv]

AttributeError: str object has no attribute decode

[@UttamSingh-ei3kv]

Guys reply

[@dzbro1194]

@@UttamSingh-ei3kv remove.decode return jsonify({'token': token})

[@carlosmunozdelabarra7147]

@@dzbro1194 🥇

[@sejalrawat19]

sir please give solution for logout i am unable to find solution for logout using jwt in python

[@BekBrace]

What is the error you’re getting ?

[@ananduap667]

AssertionError: expected view func if endpoint is not provided. I am getting this error. Can someone help?

[@BekBrace]

Is the endpoint well set in your code ?

[@cosmic_voyager_]

What about refresh token ?

[@BekBrace]

what about it

[@tahirkamal1878]

Thank's for the explanation i have an issue, i log in to an interface, but after several logins, which require google authentication, the interface doesn't require a user & password, only click on google account and login, and i want to access that interface through python to get some data, now i can get my hands on the token from the inspect element => Network, but how can i use it to login from the terminal ?

[@BekBrace]

Thank you 🙏 I’ll look into it and will be back to you when possible

[@vuhuy8952]

Hm. After login and response client with JWT token . How to make other request from client site use that token , where do you save it in client side ? And also session class look suspicious some how....

[@BekBrace]

Suspecious?

[@vuhuy8952]

@@BekBrace yeah , keep session conflict with jwt purpose

[@ntwaliandy3569]

this is soo nice!, u gat 5/5 from me .......

[@BekBrace]

Thank you!

[@TusharBhut-mk6mn]

Can you make video on individual authentication for user and admin, where user authorized can use only [GET] method, while admin authorized can use [crud] methods.

[@BekBrace]

Yes, I will

[@asilbalaban]

Token work even if already expired is it normal?

[@BekBrace]

No, shouldn't be this way - check again your code

[@asilbalaban]

I fix the issue, token expire should be defined with ‘exp’ keyword.

[@srvazkez]

Hi bro really amazing tutorial. So how we can do a refresh token bro?

[@robmartin7873]

The token should refresh each time you hit the /login route. I have the secret key autogenerated on api startup which works for me because my tokens are only good for 15min. I'm not sure if that was the question you were asking.

[@srvazkez]

@@robmartin7873 it's nice idea but I don't understand how implement

[@shashiranjan7451]

thanks

[@alexbalak7558]

You did not show how to inject your token to get verified. And your login page don't check the token. The beginning was good but the end of the video is too quick. You don't show how to inculde the token in the headers. You don't show how to store the token in the cilent browser. Half tutorial....

[@BekBrace]

yes i agree, i'm not happy with this one. "Half tutorial...." - that's even generous, tbh thanks for your honesty, Alex

[@alexbalak7558]

@@BekBrace I was to ruff. It is a good tutorial. But you should show how to put the JWT in the headers of your requests. But you must use PostMan or something like that.

[@andreycastro3444]

@@alexbalak7558 how to include the token in postman? its always returning "Token is required"

[@PrAsHaNtHdUke1093]

please tell how to pass this jwt token in web browser i did according you mentioned in source code for passing jwt token for /auth url, but its not working...please suggests any solutions for me...🙏🙏

[@m.kavyasri6458]

excellent tutorial, but am getting this error "jinja2.exceptions.TemplateNotFound: login.html" pls help me

[@BekBrace]

Check out the source code in the link below and compare your code