{"categories":[{"label":"Python Modules","url":"https://skillfed.io/packages/category/software-development-libraries-python-modules/3"}],"enrichment":{"capability":"Adds JSON Web Token (JWT) authentication to Flask applications, protecting routes and managing token lifecycles with features like refresh tokens, token revocation, and custom claims.","skillfed_tags":["authentication","jwt","flask-extension"],"use_cases":["Protect REST API endpoints by requiring valid JWT tokens in request headers before allowing access.","Implement login flows with separate access and refresh tokens to balance security and user experience.","Revoke tokens on logout or when user permissions change by maintaining a blocklist.","Add custom claims (user roles, permissions) to tokens and validate them on each request.","Enforce fresh tokens for sensitive operations like password changes or account deletions."],"what_it_does":"Flask-JWT-Extended is a Flask extension that integrates JSON Web Token authentication into your application. It wraps PyJWT and Werkzeug to provide decorators and utilities for protecting routes, validating tokens, and managing token state. The package handles the boilerplate of JWT setup so you can focus on application logic rather than cryptographic details.\n\nBeyond basic token creation and validation, it offers optional features like refresh tokens (for long-lived sessions without re-authentication), token blocklisting (revocation), custom claims validation, fresh-token enforcement for sensitive operations, and cookie-based storage with CSRF protection. You configure it once on your Flask app and then use decorators like `@jwt_required()` on routes that need authentication.","worth_installing":"Yes. Flask-JWT-Extended is actively maintained, has no known vulnerabilities, low install friction, and a permissive MIT license. It is a standard choice for JWT authentication in Flask applications and is widely used (top 5000 packages by downloads). Install it if you need JWT authentication in Flask; the API is straightforward and the optional features are genuinely useful for production applications."},"id":"flask-jwt-extended","links":{"html":"https://skillfed.io/packages/flask-jwt-extended","md":"https://skillfed.io/packages/flask-jwt-extended.md","pypi":"https://pypi.org/project/flask-jwt-extended/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-05-13","license_spdx":null,"license_treatment":"permissive","name":"Flask-JWT-Extended","python_support":"supports_current","summary":"Extended JWT integration with Flask"},"popularity":{"monthly_downloads":13637572,"position":1270,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"4.7.4"}