6

I'm trying to implement Basic Auth on my Flask application with the Flask-Login extension. Following the documentation i tried an example request loader, but it gives me a 401 Unauthorized error, while the soon to be depreciated header_loader works perfectly, so am i doing something wrong or is there a bug in the request_loader.

I use the following request_loader: 

login_manager = LoginManager(app)

@login_manager.request_loader
def load_user_from_request(req):
    print req.headers   # just to see what happens
    user = models.Werknemer.query.first() #this user exists, so it always returns a user
    return user

My protected view: 

@app.route("/test")
@login_required
def index():
    return 'OK'

And my request code:

import requests
from requests.auth import HTTPBasicAuth

test_req = requests.get('http://localhost:5000/test', auth=HTTPBasicAuth('test', 'test'))
print test_req.content

when I run my request code it returns: 

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<title>401 Unauthorized</title>
<h1>Unauthorized</h1>
<p>The server could not verify that you are authorized to access the URL requested.  You either supplied the wrong credentials (e.g. a bad password), or your browser doesn't understand how to supply the credentials required.</p>

when I leave out the auth part of my request it returns my protected view. Why is flask not accepting the Basic auth header ?

4

1 回答 1

1

我现在正在学习 Pluralsight 的课程，但我遇到了同样的错误。在我更正了身份验证设置中的语法后，它起作用了。

# Configure authentication
login_manager = LoginManager()
login_manager.session_protection = 'strong'
login_manager.login_view = 'login'
login_manager.init_app(app)

我错误地输入了最后一行并收到 404 错误。修好了这条线，它工作了。

于 2015-10-17T21:23:00.153 回答