{"categories":[{"label":"Python Modules","url":"https://skillfed.io/packages/category/software-development-libraries-python-modules/14"},{"label":"Dynamic Content","url":"https://skillfed.io/packages/category/internet-www-http-dynamic-content/2"}],"enrichment":{"capability":"Adds user authentication, authorization, and role-based access control to Flask applications with support for multiple authentication methods including OAuth, WebAuthn, and multi-factor authentication.","skillfed_tags":["authentication","authorization","flask-extension"],"use_cases":["Build a web application with user registration, login, and role-based access control without writing authentication logic from scratch.","Add OAuth social login (via authlib) to an existing Flask app to let users sign in with third-party providers.","Implement multi-factor authentication (SMS, email, or authenticator apps) for applications handling sensitive data.","Deploy WebAuthn/passkey support for passwordless authentication in modern web applications.","Enforce permission checks on Flask routes using decorators to restrict access by role or permission."],"what_it_does":"Flask-Security-Too is a Flask extension that bundles authentication, authorization, and user management into a single package. It provides role-based access control, multiple authentication strategies (username/email, OAuth, WebAuthn), multi-factor authentication (SMS, email, authenticator apps), and session management. The package is maintained as part of the Pallets Community Ecosystem and aims to follow OWASP best practices with sensible defaults, reducing the need to wire together multiple abandoned or unmaintained projects.\n\nYou configure it by providing your own User and Role models (typically via SQLAlchemy) and then instantiate the Security object with your Flask app and a datastore. It handles login forms, password hashing, permission decorators, and token-based authentication out of the box. The extension supports modern identity patterns like unified signin (username, phone, passwordless) and freshness checks for sensitive operations.","worth_installing":"Yes. This is an actively maintained, permissively licensed extension backed by the Pallets organization (which maintains Flask itself). It has no known vulnerabilities, low install friction, and provides a comprehensive, opinionated security layer that would otherwise require integrating multiple smaller packages. Install it if you need user authentication and authorization in a Flask app and want to avoid the complexity of assembling and maintaining a custom solution."},"id":"flask-security-too","links":{"html":"https://skillfed.io/packages/flask-security-too","md":"https://skillfed.io/packages/flask-security-too.md","pypi":"https://pypi.org/project/flask-security-too/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-08-12","license_spdx":null,"license_treatment":"permissive","name":"Flask-Security-Too","python_support":"supports_current","summary":"Quickly add security features to your Flask application."},"popularity":{"monthly_downloads":269164,"position":8264,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"5.8.2"}