Flask フレームワークを使用して安全な Web アプリケーションを構築する方法

from flask import Flask, redirect, url_for

app = Flask(__name__)

# 定义安全的路由和URL规则
@app.route("/login", methods=["GET", "POST"])
def login():
    # 处理用户登录逻辑
    pass

@app.route("/dashboard")
def dashboard():
    # 处理用户仪表盘逻辑
    pass

@app.route("/logout")
def logout():
    # 处理用户注销逻辑
    pass

if __name__ == "__main__":
    app.run()

from flask import Flask, redirect, url_for
from flask_login import LoginManager, UserMixin, login_user, login_required

app = Flask(__name__)

# 初始化LoginManager
login_manager = LoginManager(app)
login_manager.login_view = "login"

# 定义用户模型
class User(UserMixin):
    def __init__(self, id):
        self.id = id

@login_manager.user_loader
def load_user(user_id):
    # 查询用户模型
    return User(user_id)

# 实现登录功能
@app.route("/login", methods=["GET", "POST"])
def login():
    # 处理用户登录逻辑
    user = User(1)
    login_user(user)
    return redirect(url_for("dashboard"))

# 限制只有登录用户才能访问仪表盘页面
@app.route("/dashboard")
@login_required
def dashboard():
    # 处理用户仪表盘逻辑
    pass

if __name__ == "__main__":
    app.run()

from flask import Flask, render_template, request
from flask_wtf import FlaskForm
from wtforms import StringField, PasswordField, SubmitField
from wtforms.validators import DataRequired, Length, EqualTo
from flask_wtf.csrf import CSRFProtect

app = Flask(__name__)
app.config["SECRET_KEY"] = "your_secret_key"  # 设置密钥
csrf = CSRFProtect(app)  # 初始化CSRF保护

# 定义登录表单模型
class LoginForm(FlaskForm):
    username = StringField("Username", validators=[DataRequired(), Length(min=4, max=20)])
    password = PasswordField("Password", validators=[DataRequired(), Length(min=6, max=20)])
    confirm_password = PasswordField("Confirm Password", validators=[DataRequired(), EqualTo("password")])
    submit = SubmitField("Login")

@app.route("/login", methods=["GET", "POST"])
def login():
    form = LoginForm()
    
    if form.validate_on_submit():
        # 处理用户登录逻辑
        username = form.username.data
        password = form.password.data
        # ...
    
    return render_template("login.html", form=form)

if __name__ == "__main__":
    app.run()