We have a mostly functioning blog app, but it is missing some crucial features, such as a user login, registration function, and the ability to add and edit posts from the browser. The user authentication functionality can be achieved in many different ways, so each of the following sections in this chapter will demonstrate a mutually exclusive method to create a login functionality. Each authentication method can have different levels of security, or may be adequate for different kinds of applications, ranging from web exposed to enterprise back office.
In this chapter, we will explore the following topics:
- A brief overview of various authentication methods: basic authentication, remote user, LDAP, database authentication, and OpenID and Oauth
- How to leverage Flask login (database/cookie authentication)
- How to implement role-based access control (RBAC) to distinguish...