---
id: flask-oauthlib
version: "0.9.6"
license: BSD
license_treatment: permissive
maintenance: dormant
---

# Flask-OAuthlib — OAuthlib for Flask

License: permissive · Maintenance: dormant · Downloads: 369.8K/mo

## What it is and what it does

Flask-OAuthlib is a Flask extension that wraps oauthlib to provide OAuth authentication and authorization capabilities. It lets you build Flask applications that act as OAuth clients (authenticating users via external OAuth providers like Google or GitHub) and as OAuth providers (issuing tokens to third-party applications). The package supports OAuth 1.0a/1.0/1.1 on the client side and both OAuth 1.0 (with HMAC and RSA signatures) and OAuth 2.0 (with Bearer tokens) on the provider side.

The extension integrates directly with Flask's request/response model and provides a friendly API similar to the older Flask-OAuth. It depends on Flask, oauthlib, requests-oauthlib, and cachelib. However, the package is dormant—its last release was 2020-09-07, and the author explicitly recommends using authlib instead for new projects. This makes it suitable mainly for maintaining existing applications rather than starting new OAuth integrations.

Use it for:

- Add OAuth 2.0 login (e.g., via Google or GitHub) to an existing Flask web application.
- Build a Flask-based OAuth provider to issue access tokens to third-party client applications.
- Migrate from Flask-OAuth to a more capable OAuth library while keeping Flask integration.
- Implement OAuth 1.0a authentication for legacy APIs that do not support OAuth 2.0.
- Cache OAuth tokens and credentials within a Flask application using the cachelib integration.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Flask-OAuthlib adds OAuth 1.0a and OAuth 2.0 client and provider support to Flask applications, enabling authentication with remote OAuth services and creation of your own OAuth providers.

No for new projects—the author recommends authlib instead. Yes-with-conditions for maintaining existing Flask-OAuthlib applications: the package is dormant (last release 2020-09-07), has no known vulnerabilities, and installs easily, but you should plan a migration path to authlib or another actively maintained OAuth library. Do not use for new OAuth integrations.

## Install

pip install flask-oauthlib
uv add flask-oauthlib
poetry add flask-oauthlib

## Installing Flask-OAuthlib

Before you install: Low install friction with a pure-Python wheel. Maintenance is dormant—the last release was 2020-09-07, and the repository shows no recent commits despite being archived=false. The author's own description recommends authlib as an alternative.

License in practice: BSD license (permissive) imposes no significant restrictions on use, modification, or distribution in proprietary or open-source projects.

Quickstart:

pip install Flask-OAuthlib

from flask import Flask
from flask_oauthlib.client import OAuth

app = Flask(__name__)
oauth = OAuth(app)

Requires Flask and oauthlib as runtime dependencies; no minimum Python version is formally specified, though classifiers indicate support for Python 2.6 through 3.6.

Verify before relying:

- Whether the package remains compatible with modern Python versions (3.8+) despite classifiers only listing up to 3.6.
- Current state of OAuth 2.0 provider implementation and whether it meets contemporary security standards.
- Whether dormant status means critical bugs or security issues in the OAuth flow implementation will be addressed.

## Package facts

- License: BSD (permissive)
- Python support: unspecified
- Install friction: low
- Maintenance: dormant
- Downloads: 369.8K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

flask oauth client provider, oauth 1.0a 2.0 flask integration, flask authentication oauth, oauth bearer token flask, flask oauth provider setup, oauth-client-provider, dormant-maintenance

[View on SkillFed](https://skillfed.io/packages/flask-oauthlib) · [View on PyPI](https://pypi.org/project/flask-oauthlib/)