Flask-Cognito

What it is and what it does

Flask-Cognito is a Flask extension that plugs AWS Cognito JWT authentication into your application. It validates incoming JWT tokens from Cognito user pools, extracts user identity from the token payload, and provides decorators to protect routes and enforce group-based access control. The extension sits between your Flask routes and Cognito's identity service, handling token verification and making the authenticated user's claims available to your handlers via context variables.

You configure it with your Cognito region and user pool ID, then decorate routes with @cognito_auth_required to enforce authentication. The package also supports restricting access by Cognito group membership and lets you hook in a custom identity lookup function to map Cognito users to your own database records. It uses cognitojwt internally to handle JWT validation.

Use it for

• Protect Flask API endpoints by requiring valid Cognito access or ID tokens in the Authorization header.
• Map Cognito user identities to your application's user database for role-based or permission-based access control.
• Enforce group membership restrictions on specific routes using the @cognito_group_permissions decorator.
• Authenticate serverless Flask applications deployed on AWS Lambda that rely on Cognito for identity management.
• Validate JWT tokens without implementing JWT parsing and cryptographic verification yourself.

Worth the install?

AI-flagged interpretation of the facts on this page. Verify before relying on it.

Install

flask-cognito on PyPI

Before you install

Installation friction is high. Maintenance is dormant—the last commit was 2024-05-05 and the latest release was 2024-04-13. The repository remains active (95 stars, not archived) but updates are infrequent.

Requires an AWS Cognito user pool already set up with region and pool ID; Flask and its dependencies must be installed separately.

License in practice

Licensed under MIT (permissive), so you may use, modify, and distribute the package freely in commercial and private projects with minimal restrictions.

Quickstart

pip install Flask-Cognito

from flask_cognito import CognitoAuth, cognito_auth_required

app.config.update({
    'COGNITO_REGION': 'eu-central-1',
    'COGNITO_USERPOOL_ID': 'your-pool-id'
})
cogauth = CognitoAuth(app)

@app.route('/api/private')
@cognito_auth_required
def protected():
    return {'status': 'authenticated'}

Package facts

Evidence: Flask-Cognito-1.21.tar.gz

Tags

More Python Modules packages

See also fastapi-cognito · Flask-AWSCognito · Flask-JWT-Extended · pycognito · cognitojwt · fastapi-cloudauth · warrant · aws-cdk.aws-cognito · Flask-HTTPAuth · axioms-fastapi