最新消息:雨落星辰是一个专注网站SEO优化、网站SEO诊断、搜索引擎研究、网络营销推广、网站策划运营及站长类的自媒体原创博客

How to protect Python Flask Blueprints pages with Azure authentication - Stack Overflow

programmeradmin1浏览0评论

I have got an app which authenticate using Azure AD. If I browse to / or /page then it prompts to login, how do I protect other pages/blueprints i.e. profile page?

app.py

import os
import requests
from flask import Flask, render_template
from identity.flask import Auth
import app_config
from profile import profile_page

app = Flask(__name__)

app.register_blueprint(profile_page)

app.config.from_object(app_config)
auth = Auth(
    app,
    authority=os.getenv("AUTHORITY"),
    client_id=os.getenv("CLIENT_ID"),
    client_credential=os.getenv("CLIENT_SECRET"),
    redirect_uri=os.getenv("REDIRECT_URI"),
    oidc_authority=os.getenv("OIDC_AUTHORITY"),
    b2c_tenant_name=os.getenv("B2C_TENANT_NAME"),
    b2c_signup_signin_user_flow=os.getenv("SIGNUPSIGNIN_USER_FLOW"),
    b2c_edit_profile_user_flow=os.getenv("EDITPROFILE_USER_FLOW"),
    b2c_reset_password_user_flow=os.getenv("RESETPASSWORD_USER_FLOW"),
)

@app.route("/")
@auth.login_required(scopes=os.getenv("SCOPE", "").split())
def index(*, context):
    api_result1 = (
        requests.get(  # Use access token to call a web api
            os.getenv("ENDPOINT"),
            headers={"Authorization": "Bearer " + context["access_token"]},
            timeout=30,
        ).json()
        if context.get("access_token")
        else "Did you fet to set the SCOPE environment variable?"
    )

    ##
    return render_template(
        "index.html",
        user=context["user"],
        edit_profile_url=auth.get_edit_profile_url(),
        api_endpoint=os.getenv("ENDPOINT"),
        title=f"Flask Web App Sample v{__version__}",
    )

@app.route("/page1")
@auth.login_required
def page1(*, context):
    test = "hello test app.py"
    return render_template("page1.html", test=test)
    
if __name__ == "__main__":
app.run(debug=True)

profile.py

from flask import Flask, render_template, flash, redirect, url_for, request, Blueprint
import requests

profile_page = Blueprint("profile", __name__)


@profile_page.route("/profile")
 def profile():
    test = "hello from profile.py"
    return render_template("profile.html", test=test)
 

I have tried adding @auth.login_required after @profile_page.route("/profile") but it complains about app not defined in profile page.

Any help on this would be much appreciated, thank you.

发布评论

评论列表(0)

  1. 暂无评论