vimalloc/flask-jwt-extended

Health v2 · maintenance only

Adoption not part of the score

1581 stars · 253 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Flask-JWT-Extended is an open source Flask extension that adds JSON Web Token (JWT) support for protecting routes, with many optional batteries-included features. It supports custom claims, automatic user loading, refresh and fresh tokens, token revocation, and cookie-based storage with CSRF protection.

Use cases

• add jwt authentication to a flask api
• protect flask routes with web tokens
• implement refresh tokens in flask
• revoke or blocklist jwt tokens in flask
• store jwt tokens in cookies with csrf protection
• load current user from jwt token in flask
• add custom claims to jwts in flask

When to choose

• you are building a Flask application or API that needs token-based authentication
• you want batteries-included JWT features like refresh tokens, fresh tokens, and revocation out of the box
• you need cookie-based token storage with built-in CSRF protection
• you want a well-documented, actively maintained, MIT-licensed Flask extension

When to avoid

• your project does not use Flask (consider a framework-agnostic JWT library like PyJWT instead)
• you need OAuth2/OpenID Connect flows rather than simple JWT auth
• you are building a non-Python backend

Facets

library · maturity stable

auth middleware web-framework web-development backend security apis python flask jwt -web-tokens refresh-tokens csrf-protection token-revocation

Member repositories

For agents

markdown · JSON · MCP: product_card(name="vimalloc/flask-jwt-extended")