flask-admin VS flask-login

Are this modules good? https://github.com/flask-admin/flask-admin and https://github.com/maxcountryman/flask-login

So i prefer flask-admin.

Here me out, look at the flask-admin examples.

Django ORM feels half-baked compared to SQLAlchemy, don't know why you need django if flask-admin exist.

I'm also here because Flask-Admin MVC design plays nice with SQLAlchemy.

See flask-admin/examples/auth I recommend you use Flask-Security-Too.

Also it sounds like you inherited a flask application composed of different modules. But if you want a good example to see how to put things together i do appreciate flask_admin examples.

The reason im using py sqla for mvc i look at flask-admin for api i look at connexion, here a tutorial if your interested.

Have you looked at flask admin for example i know apache airflow have been using it.

have a look at flask_admin not saying use it(and if you want to that also fine) but it implements a lot of the classic backend mvc pattern for you to learn from.

Are this modules good? https://github.com/flask-admin/flask-admin and https://github.com/maxcountryman/flask-login

flask-login: Provides access to the current username

I use Flask-login and implement role based authentication using decorators.

Flask-Login has a closed Issue #19 on GitHub but it actually doesn't answer my question :-/

You can try to look here https://github.com/maxcountryman/flask-login/blob/main/test_login.py

The example code provided by flask-login does it this way, but this only works because it's pulling the User objects from a global hard-coded dictionary, not as in a real-world scenario like a database, where the DB must be checked and User objects created after the user enters their login credentials. And I can't seem to find any other example code that illustrates using a database with flask-login.

What u/MikeDoesDo said. `flask-login` is rather built for the traditional approach to login and user management. It doesn't have a concept of auth tokens or JWT. It uses traditional cookies. The code that actually sets the cookie for the session isn't robust for a production app. Secure tokens have to be signed with robust keys. In addition to strong tokens, you also need measures that prevent brute-force attacks. Third party systems like auth0 bring all of this and more. Besides, with these systems you delegate the login process to the UI and the backend simply needs to verify incoming tokens. The crucial part is that you verify the token contents (audience and such) and the signature. For a production app with sensitive data and money behind it, don't settle for anything less than this.

https://github.com/maxcountryman/flask-login/blob/c77ba6b12ef5e3045df054cf8bf2d61c4d83f54f/flask_login/mixins.py#L35-L39