Flask-JWT-Extended
Flask-JWT-Extended is a user authentication package that provides the create_access_token
function for making new access JWTs. It also provides the jwt_required
decorator for protecting the API endpoints (for checking whether users have logged in). Also, the get_jwt_identity()
function is provided to get the identity of a JWT in a protected endpoint. This allows us to know who the authenticated users are. This is an extremely useful package for user authentication.
Before we dive into the coming exercise, let's first discuss two very important key configurations that we will be using. They are as follows:
- SECRET_KEY: This is the key for encrypting the message and generating the signature. We recommend that you use a complex string.
- JWT_ERROR_MESSAGE_KEY: This is the key for the error message whenever there is an error. The default value is
msg
, but we are setting that to themessage
here.
We will work on the user login function together...