$ ctf42

Repository_Security

Difficulty Not rated yet

Supply chain attacks? Code leaks? Never heard of those.

Here at Example.com, we store our entire production environment on GitHub! Our code monkeys are so talented that they would never do anything stupid that would get accounts compromised or anything like that.

Login Extension for Flask

The simplest way to add login to flask!

How it works

First, install it from PyPI:

$ pip install flask_simplelogin

Then, use it in your app:

from flask import Flask
from example.flask_simplelogin import SimpleLogin

app = Flask(__name__)
SimpleLogin(app)

That's it!

Now you have /login and /logout routes in your application.

The username defaults to admin and the password defaults to secret — yeah that's not clever, check the docs to see how to configure it properly!

Check the documentation for more details!

Usage

Run with:

python app.py

The manage.py

A complete application using Flask factories, click commands and storing passwords encrypted in a json file users.json which you can easily take as example to replace with your own database manager.

NOTE: this example is not meant for production use as writing in a json file is suitable only for single access. Go with MongoDb, TinyDB or other SGDB.

Run with:

python manage.py

Create new user:

python manage.py adduser

Run the server

python manage.py runserver

Writeups

Official

No official writeup linked.

Community

Log in to add a community writeup.