Flask-Login

Flask-Login：管理已登录用户的用户会话
Werkzeug：计算密码散列值并进行核对
itsdangerous：生成并核对加密安全令牌

Flask-Login

Flask-Login provides user session management for Flask. It handles the common tasks of logging in, logging out, and remembering your users’ sessions over extended periods of time.

• 配置你的应用

login_manager = LoginManager()login_manager.init_app()login_manager.session_protection = 'strong'login_manager.login_view = 'admin.login'

• 配置获取用户方法

@login_manager.user_loaderdef load_user(user_id):    return User.get(user_id)

• 当前用户类实现实现的方法

is_authenticated: 账户是否授权，一般设为Trueis_active: 账户活跃属性，一般设为Trueis_anonymous: 是否匿名用户，一般设为Falseget_id: unicode属性id

• flask-login已经实现

from flask_login import UserMixinclass User(UserMixin):    pass

• login_user,logout_user

def login():    name = request.form['username']    password = request.form['password']    if verify_password(self, password):        login_user(user, remember=True)def logout():    logout_user()

• 密码加密比对

from werkzeug.security import generate_password_hash, check_password_hashclass User(UserMixin, db.Document):    name = db.StringField(required=True, max_length=64)    password = db.StringField(max_length=255)    @staticmethod    def generate_password(password):        return generate_password_hash(password)    def verify_password(self, password):        return check_password_hash(self.password, password)

• 保护路由

from flask_login import [e-mail]('/secret')@login_requireddef sercet():    return "Only auth users are allowed"