Creating a Basic Login Endpoint | CodeSignal Learn

Creating a Basic Login Endpoint | CodeSignal Learn

Creating a Basic Login Endpoint

Welcome to our first lesson on authentication with Flask! Today, we'll learn how to build a simple login system for our web application. This lesson is foundational because login systems are crucial for almost any web app that handles user data or personalized experiences. By the end of this unit, you'll be able to create an endpoint that accepts login credentials, validates them, and responds accordingly.

Initial Setup

Before we dive into building the login endpoint, let's set up our application and mock database. Pythonfrom flask import Flask, request, jsonify # Initialize a Flask app instance app = Flask(__name__) # Mock database of users database = [ {"id": 1, "username": "cosmo", "password": "space-corgi"} ] This code initializes a Flask app and creates a mock dataset that we'll use for authentication.

Introducing Marshmallow for Data Validation

To ensure the login credentials are in the correct format, we'll use Marshmallow to help us validate and deserialize input data. Let's create a simple schema for our login data with username and password : Python from marshmallow import Schema, fields, ValidationError from marshmallow.validate import Length # Define a schema for the login data class LoginSchema(Schema): username = fields.Str(required=True, validate=Length(min=1)) password = fields.Str(required=True, validate=Length(min=1)) # Create an instance of LoginSchema login_schema = LoginSchema() In this schema, we define username and password as required string fields, and use Length(min=1) to ensure both fields are not empty.

Creating the Login Endpoint

Now, let's create the /login endpoint in our Flask application. This is where users will send their login credentials. Python from flask import request, jsonify # Define a route to receive login credentials @app.route('/login', methods=['POST']) def login():

Validating Incoming Login Data

To validate the incoming data from the request we will use the LoginSchema we previously defined. Python # Define a route to receive login credentials @app.route('/login', methods=['POST']) def login(): try: # Validate and deserialize the input data according to the schema data = login_schema.load(request.get_json()) except ValidationError as err: # If validation fails, return an error message and a 400 status code return jsonify(error=err.messages), 400

Extracting and Authenticating User

We can now extract the username and password from the validated data and check for the given username in our database. Python # Define a route to receive login credentials @app.route('/login', methods=['POST']) def login(): try: # Validate and deserialize the input data according to the schema data = login_schema.load(request.get_json()) except ValidationError as err: # If validation fails, return an error message and a 400 status code return jsonify(error=err.messages), 400 # Extract username and password from the validated data username = data['username'] password = data['password'] # Find the user in the mock database user = next((user for user in database if user["username"] == username), None)

Checking Credentials and Responding

Finally, once we know the user exists, we check if the given password matches with the one in the database. Then respond accordingly. Python # Define a route to receive login credentials @app.route('/login', methods=['POST']) def login(): try: # Validate and deserialize the input data according to the schema data = login_schema.load(request.get_json()) except ValidationError as err: # If validation fails, return an error message and a 400 status code return jsonify(error=err.messages), 400 # Extract username and password from the validated data username = data['username'] password = data['password'] # Find the user in the mock database user = next((user for user in database if user["username"] == username), None) # Check if the user exists and if the password matches if user and user["password"] == password: # Login successful return jsonify(message="Login successful"), 200 else: # Return an error if the user does not exist or the password is incorrect return jsonify(error="Bad username or password"), 401

Accessing the Login Endpoint

When the client sends a POST request to /login with correct credentials, they should receive a 200 OK response with a message indicating a successful login: JSON { "message": "Login successful" } However, if the client provides incorrect credentials, they will receive a 401 Unauthorized response indicating a bad username or password: JSON { "error": "Bad username or password" } Additionally, if the request fails validation, such as missing required fields, the client will receive a 400 Bad Request response with error details: JSON { "error": "Validation error details here" }

Summary and Next Steps

In this lesson, we learned to create a basic login endpoint using Flask by covering how to: Validate data to ensure login credentials are well-formed. Create a /login endpoint to accept, validate, and authenticate user credentials. Handle errors with appropriate responses for validation failures and incorrect login attempts. Next, you'll put this knowledge into practice by creating and testing your own login endpoint. In upcoming lessons, we'll explore JWT (JSON Web Token) authentication to further secure our application. Stay tuned and continue practicing!

Next Lesson: Generating JWT Tokens Upon Login

Sign up

Join the 1M+ learners on CodeSignal

Be a part of our community of 1M+ users who develop and demonstrate their skills on CodeSignal