How to secure an endpoint for selected users with Flask-JWT-Extended

SAMER SAEID answered on May 15, 2022 Popularity 1/10 Helpfulness 1/10

answer How to secure an endpoint for selected users with Flask-JWT-Extended

related How to secure an endpoint for selected users with Flask-JWT-Extended

How to secure an endpoint for selected users with Flask-JWT-Extended

Comment

from flask import abort
from flask_jwt_extended import current_user

@app.route('/users/edit')
@app.route('/users/<userid:int>/edit')
@userid_must_match
def users_edit():
    # ... handle view for matching user via current_user

Popularity 1/10 Helpfulness 1/10 Language python

Source: Grepper

Tags: endpoint flask-jwt-extended python selected

Link to this answer
Share Copy Link

Contributed on May 15 2022

SAMER SAEID

0 Answers Avg Quality 2/10

Closely Related Answers

How to secure an endpoint for selected users with Flask-JWT-Extended

Comment

from flask import abort
from flask_jwt_extended import current_user

@app.route('/users/<userid:int>/edit')
@jwt_required
def users_edit(userid):
    if userid != current_user.id:
        abort(403)

    # ... handle view for matching user

Popularity 1/10 Helpfulness 1/10 Language python

Source: Grepper

Tags: flask-jwt-extended python selected endpoint

Link to this answer
Share Copy Link

Contributed on May 15 2022

SAMER SAEID

0 Answers Avg Quality 2/10

How to secure an endpoint for selected users with Flask-JWT-Extended

Comment

# assuming that the sub claim is an integer value
    if userid != get_jwt_identity()

Popularity 1/10 Helpfulness 1/10 Language python

Source: Grepper

Tags: selected endpoint flask-jwt-extended python

Link to this answer
Share Copy Link

Contributed on May 15 2022

SAMER SAEID

0 Answers Avg Quality 2/10

How to secure an endpoint for selected users with Flask-JWT-Extended

Comment

from functools import wraps
from flask_jwt_extended import current_user, jwt_protected

def userid_must_match(f):
    """Abort with a 403 Forbidden if the userid doesn't match the jwt token

    This decorator adds the @protected decorator

    Checks for a `userid` parameter to the function and aborts with 
    status code 403 if this doesn't match the user identified by the
    token.
    
    """

    @wraps(f)
    @jwt_protected
    def wrapper(*args, userid=None, **kwargs):
        if userid is not None and userid != current_user.id:
            abort(403)
        return f(*args, **kwargs)

    return wrapper

Popularity 1/10 Helpfulness 1/10 Language python

Source: Grepper

Tags: endpoint flask-jwt-extended python selected

Link to this answer
Share Copy Link

Contributed on May 15 2022

SAMER SAEID

0 Answers Avg Quality 2/10

How to secure an endpoint for selected users with Flask-JWT-Extended

Comment

@app.route('/users/<userid:int>/edit')
@userid_must_match
def users_edit():
    # ... handle view for matching user

Popularity 1/10 Helpfulness 1/10 Language python

Source: Grepper

Tags: flask-jwt-extended python selected endpoint

Link to this answer
Share Copy Link

Contributed on May 15 2022

SAMER SAEID

0 Answers Avg Quality 2/10

How to secure an endpoint for selected users with Flask-JWT-Extended

Contents

More Related Answers

How to secure an endpoint for selected users with Flask-JWT-Extended

Closely Related Answers

How to secure an endpoint for selected users with Flask-JWT-Extended

How to secure an endpoint for selected users with Flask-JWT-Extended

How to secure an endpoint for selected users with Flask-JWT-Extended

How to secure an endpoint for selected users with Flask-JWT-Extended

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.