GitHub / miguelgrinberg/Flask-HTTPAuth issues and pull requests
#167 - Fix to Clear TCP Buffer on Unauthorized Large File Uploads in Swagger-UI (#138)
Pull Request -
State: closed - Opened by Nantero1 11 months ago
- 3 comments
#166 - add HTTPCookieAuth for token auth in req cookies
Pull Request -
State: closed - Opened by mattproetsch 12 months ago
- 4 comments
#165 - Add check before asking for credentials
Issue -
State: closed - Opened by OpenSourceSimon about 1 year ago
- 4 comments
#164 - Trailing '==' in a token breaks verify_token()
Issue -
State: open - Opened by lordslair almost 2 years ago
- 3 comments
Labels: question
#163 - two tiny tweaks to the docs
Pull Request -
State: closed - Opened by odigity almost 2 years ago
- 5 comments
#162 - make setting header configurable
Issue -
State: closed - Opened by sina-rostami almost 2 years ago
- 2 comments
Labels: question
#161 - Token is `None` in containerized setup
Issue -
State: open - Opened by finngaida about 2 years ago
- 16 comments
Labels: question
#160 - Decorator verify_token not working with changes version werkzeug 2.3.0
Issue -
State: closed - Opened by GabiAndi over 2 years ago
#159 - Fix for Flask 2.3.0
Pull Request -
State: closed - Opened by NORXND over 2 years ago
- 7 comments
#158 - Flask_httpauth installation not working with pip but worked with pip3
Issue -
State: closed - Opened by ankit-gautam23 over 2 years ago
- 2 comments
Labels: question
#157 - Token Auth Example won't run with with itsdangerous > 2.0
Issue -
State: closed - Opened by pmaresca over 2 years ago
- 1 comment
Labels: bug
#156 - Role based authentication for MultiAuth
Issue -
State: closed - Opened by algeti over 2 years ago
- 2 comments
Labels: question
#155 - Restrict endpoint to selected auth in MultiAuth
Issue -
State: closed - Opened by tapan1359 over 2 years ago
- 2 comments
Labels: question
#154 - Customized 401 page
Issue -
State: closed - Opened by lrlrlrlr almost 3 years ago
- 3 comments
Labels: question
#153 - verify_token custom error based on verification outcome
Issue -
State: closed - Opened by samueldominguez almost 3 years ago
- 1 comment
Labels: question
#152 - docs: get_user_roles auth argument
Pull Request -
State: closed - Opened by targhs about 3 years ago
- 1 comment
#151 - user/pwd encoding is assumed (hardcoded) to be utf-8
Issue -
State: closed - Opened by lafrech about 3 years ago
- 5 comments
Labels: bug
#150 - Custom return response on unauthorized
Issue -
State: closed - Opened by sicenul over 3 years ago
- 2 comments
Labels: question
#149 - Optional use of @auth.login_required
Issue -
State: closed - Opened by sicenul over 3 years ago
- 2 comments
Labels: question
#148 - support qop=auth
Pull Request -
State: closed - Opened by ballzb over 3 years ago
- 3 comments
#147 - Is there any plan to support 'qop' option?
Issue -
State: closed - Opened by ballzb over 3 years ago
- 5 comments
Labels: question
#146 - Added owner check.
Pull Request -
State: closed - Opened by muskelo over 3 years ago
#145 - __version__ is gone
Issue -
State: closed - Opened by solsticedhiver over 3 years ago
- 4 comments
#144 - Digest Auth plain-text passwords
Issue -
State: closed - Opened by HomiGrotas over 3 years ago
- 4 comments
Labels: question
#143 - added missing example
Pull Request -
State: closed - Opened by HomiGrotas over 3 years ago
- 3 comments
#142 - Unable to change user and password for authenticate
Issue -
State: closed - Opened by dmtzs over 3 years ago
- 6 comments
Labels: question
#141 - Token refresh
Issue -
State: open - Opened by Christian-Death over 3 years ago
- 1 comment
Labels: question
#140 - How do I make HTTPDigestAuth not use cookies?
Issue -
State: closed - Opened by GormWH over 3 years ago
- 2 comments
#139 - Basic auth doesn't support : in username fix
Pull Request -
State: closed - Opened by HomiGrotas almost 4 years ago
- 3 comments
#138 - Critical security issue when uploading files
Issue -
State: closed - Opened by Nantero1 almost 4 years ago
- 2 comments
Labels: bug
#137 - Update index.rst
Pull Request -
State: closed - Opened by jonasps almost 4 years ago
#136 - why the Flask view function need authentication even the function did not have @auth.login_required decorators?
Issue -
State: closed - Opened by myahuang almost 4 years ago
- 4 comments
Labels: question
#135 - Does the HTTPS certificate encrypt the transmission of user names and passwords
Issue -
State: open - Opened by wangyifan349 almost 4 years ago
- 1 comment
Labels: question
#134 - Examples of HTTPBasicAuth need to be shown with HTML too
Issue -
State: closed - Opened by nav9 almost 4 years ago
- 1 comment
Labels: question
#133 - Feature request: Support application factories
Issue -
State: open - Opened by ikreb7 almost 4 years ago
- 1 comment
Labels: question
#132 - Chrome is asking for password every time
Issue -
State: open - Opened by duhd1993 almost 4 years ago
- 3 comments
Labels: question
#131 - Are there any common strategies for making login_required the default for all routes?
Issue -
State: closed - Opened by ethagnawl about 4 years ago
- 4 comments
Labels: question
#130 - Type of g.flask_httpauth_user
Issue -
State: open - Opened by tabebqena about 4 years ago
- 4 comments
Labels: question
#129 - custom htpasswd file for specific tenant passed as argument's endpoint
Issue -
State: open - Opened by kovacivo about 4 years ago
- 1 comment
Labels: question
#128 - Store tokens in the session cookies.
Issue -
State: closed - Opened by tabebqena about 4 years ago
- 2 comments
Labels: question
#127 - Fixed minor typo
Pull Request -
State: closed - Opened by reggiev about 4 years ago
#126 - DeprecationWarning: replace safe_str_cmp with hmac.compare_digest
Pull Request -
State: closed - Opened by federicoemartinez about 4 years ago
- 3 comments
#125 - Select the closest auth according to auth type
Pull Request -
State: closed - Opened by lykling over 4 years ago
- 2 comments
Labels: enhancement
#124 - add support for url resources
Pull Request -
State: closed - Opened by skeetwu over 4 years ago
- 4 comments
Labels: question
#123 - flask-restless/flask-admin integration
Issue -
State: closed - Opened by reubano over 4 years ago
- 3 comments
#122 - Unhandled UnicodeDecodeError for malformed data
Issue -
State: closed - Opened by bastianraschke over 4 years ago
#121 - Bugfix/possible unicode decode error
Pull Request -
State: closed - Opened by bastianraschke over 4 years ago
- 1 comment
#120 - Concurent Basic auth
Issue -
State: closed - Opened by lysektomas over 4 years ago
- 8 comments
Labels: question
#119 - get_user_roles takes auth as argument
Issue -
State: closed - Opened by gemerden over 4 years ago
- 4 comments
Labels: documentation
#118 - Prevent user enumeration in example
Pull Request -
State: closed - Opened by HughVolpe over 4 years ago
- 3 comments
#117 - User enumeration
Issue -
State: closed - Opened by HughVolpe over 4 years ago
- 2 comments
Labels: question
#116 - Fixes typo
Pull Request -
State: closed - Opened by renatoliveira over 4 years ago
- 1 comment
#115 - Fix formatting / resolve build
Pull Request -
State: closed - Opened by mwri over 4 years ago
#114 - Set response Status Code to 200 in error handler
Issue -
State: closed - Opened by rudolpjo over 4 years ago
Labels: bug
#113 - HTTPDigestAuth @get_password authentication needs improvements
Issue -
State: closed - Opened by kasanitej almost 5 years ago
- 7 comments
Labels: question
#112 - Type annotations / type hints / stub files for mypy
Issue -
State: closed - Opened by MartinThoma almost 5 years ago
- 11 comments
Labels: question
#111 - how to define decorator for use by multiple modules
Issue -
State: closed - Opened by bsl almost 5 years ago
- 2 comments
Labels: question
#110 - Add optional support to MultiAuth
Pull Request -
State: closed - Opened by pryankster almost 5 years ago
- 1 comment
Labels: enhancement
#109 - MultiAuth doesn't support 'optional'
Issue -
State: closed - Opened by pryankster almost 5 years ago
- 6 comments
Labels: question
#108 - Role Based Access Control
Issue -
State: closed - Opened by aniketsnv-1997 almost 5 years ago
- 2 comments
Labels: question
#107 - How to protect "hidden" endpoints/routes
Issue -
State: closed - Opened by Querela almost 5 years ago
- 7 comments
Labels: question
#106 - HTTP Method-based role authentiation
Issue -
State: closed - Opened by Querela almost 5 years ago
- 7 comments
Labels: question
#105 - auth.login_required does not work correctly on flask-socketio connect handler
Issue -
State: open - Opened by aisotton about 5 years ago
- 7 comments
Labels: enhancement
#104 - Using API key
Issue -
State: closed - Opened by wronsini about 5 years ago
- 1 comment
Labels: question
#103 - token life
Issue -
State: closed - Opened by GalymzhanAbdimanap about 5 years ago
- 1 comment
Labels: question
#102 - Add a custom authorization header option
Pull Request -
State: closed - Opened by mrf345 over 5 years ago
- 2 comments
Labels: enhancement
#101 - call decorated verify_password
Issue -
State: closed - Opened by yan-hic over 5 years ago
- 2 comments
Labels: question
#100 - Authentication Help
Issue -
State: closed - Opened by marianakhoul over 5 years ago
- 7 comments
Labels: question
#99 - Role based access control
Pull Request -
State: closed - Opened by gemerden over 5 years ago
- 1 comment
#98 - adds role based access control
Issue -
State: closed - Opened by gemerden over 5 years ago
- 8 comments
Labels: enhancement
#97 - Add example for Authorization header format
Pull Request -
State: closed - Opened by oliverswitzer over 5 years ago
- 1 comment
Labels: documentation
#96 - Add functionality to accept other header names
Issue -
State: closed - Opened by pangolingo over 5 years ago
- 1 comment
Labels: enhancement
#95 - update basic auth scheme
Pull Request -
State: closed - Opened by haokr over 5 years ago
- 2 comments
Labels: question
#94 - Digest Authentication with Edge browser
Issue -
State: closed - Opened by c-goes over 5 years ago
- 3 comments
Labels: question
#93 - How to return more information from verify_token
Issue -
State: closed - Opened by bshetti over 5 years ago
- 3 comments
Labels: question
#92 - Does the wheel not support HTTP DIgest in RFC 2617 protocol?
Issue -
State: closed - Opened by chen-zhuohan over 5 years ago
- 2 comments
Labels: question
#91 - Add login_optional decorator
Pull Request -
State: closed - Opened by smmalmansoori over 5 years ago
- 8 comments
#90 - Add login_optional decorator
Issue -
State: closed - Opened by smmalmansoori over 5 years ago
- 2 comments
Labels: enhancement
#89 - Error with HTTPAuth by using Custom verify
Issue -
State: closed - Opened by Chaostheorie almost 6 years ago
- 2 comments
Labels: question
#88 - Integration with Flask-Login's current_user
Issue -
State: closed - Opened by mfrlin almost 6 years ago
- 3 comments
Labels: question
#87 - token auth not validating correctly
Issue -
State: closed - Opened by schirino almost 6 years ago
- 3 comments
Labels: question
#86 - Post token cannot use Bearer frefix, but Token is ok
Issue -
State: closed - Opened by de8ug about 6 years ago
#85 - Fix links in CHANGES.md and changelog template
Pull Request -
State: closed - Opened by klssmith about 6 years ago
- 1 comment
#84 - How should I send the request from front-end?
Issue -
State: closed - Opened by wizounovziki about 6 years ago
- 3 comments
Labels: question
#83 - Use constant time string comparisons
Pull Request -
State: closed - Opened by brendanlong over 6 years ago
- 9 comments
#82 - Default password comparison should use constant-time string comparison
Issue -
State: closed - Opened by brendanlong over 6 years ago
- 1 comment
Labels: bug
#81 - docs: added notes about password storing security
Pull Request -
State: closed - Opened by thugcee over 6 years ago
- 1 comment
Labels: documentation
#80 - In security context, examples in documentation are terrible
Issue -
State: closed - Opened by thugcee over 6 years ago
- 3 comments
Labels: documentation
#79 - Edited and changed the usage of JWT
Pull Request -
State: closed - Opened by unuseless over 6 years ago
- 1 comment
#78 - Cannot call hash_password with one argument
Issue -
State: closed - Opened by Vayel over 6 years ago
- 1 comment
#77 - HTTPTokenAuth scheme is an optional init param
Issue -
State: closed - Opened by maxslimmer over 6 years ago
- 1 comment
#76 - decorator encapsulation
Issue -
State: closed - Opened by startupsandcode almost 7 years ago
- 1 comment
#75 - on bad auth don't ask browser to prompt user if this was an AJAX request
Pull Request -
State: closed - Opened by richardplatel about 7 years ago
- 2 comments
Labels: question, auto-closed
#74 - Refactored HTTPAuth login_required
Pull Request -
State: closed - Opened by nestedsoftware about 7 years ago
- 1 comment
#72 - inject current user into decorator callbacks
Issue -
State: closed - Opened by nestedsoftware about 7 years ago
- 12 comments
Labels: question
#71 - Update PyPI link in README
Pull Request -
State: closed - Opened by greyli about 7 years ago
#69 - Token auth and JWT term usage vs. JWS
Issue -
State: closed - Opened by unuseless about 7 years ago
- 6 comments
Labels: bug
#66 - Can auth be imported into modules with routes that have been seperated from the main app file
Issue -
State: closed - Opened by strachg about 7 years ago
- 3 comments
Labels: question, auto-closed
#64 - Problem with the installation precess
Issue -
State: closed - Opened by RaulP92 over 7 years ago
- 5 comments
Labels: question, auto-closed
#59 - Disable http auth when testing
Issue -
State: closed - Opened by jxltom over 7 years ago
- 4 comments
Labels: question