Loading repository data…
diegoperea20 / repository
This project implements Google authentication using exclusively the backend. The solution is developed with Flask as an API, fully handling the registration, authorization, and login processes through Google, without any frontend involvement in the authentication logic External fronted.
This is a REST API built with Flask that implements two authentication methods:
python -m venv venv
source venv/bin/activate # On Windows: venv\Scripts\activate
Or use miniconda
conda create -n environment_name python=3.10
pip install -r requirements.txt
# To save list of packages
# pip freeze > requirements.txt
pip install -r requirements.txt
Create a .env file in the project root with the following content:
SECRET_KEY=your-secret-key-here-change-in-production
JWT_SECRET_KEY=your-jwt-secret-here-change-in-production
DATABASE_URL=sqlite:///app.db
GOOGLE_CLIENT_ID=your-google-client-id
GOOGLE_CLIENT_SECRET=your-google-client-secret
CORS_ORIGINS=http://localhost:3000
http://localhost:5000/authorize/google.env fileCreate Google Console Project and enable Google+ API
Use Docker
# Commands to use MySQL container
docker run --name mymysql -e MYSQL_ROOT_PASSWORD=mypassword -p 3306:3306 -d mysql:latest
docker exec -it mymysql bash
# Inside the MySQL container
mysql -u root -p
create database flaskmysql;
And your .env DATABASE_URL will be:
# PostgreSQL example
DATABASE_URL=postgresql://postgres:mypassword@localhost:5432/flaskpostgresql
# MySQL example
DATABASE_URL=mysql+pymysql://root:mypassword@localhost:3306/flaskmysql
python database.py
The API will be available at http://localhost:5000
POST /api/registerRegister a new user.
Request Body:
{
"username": "user@example.com",
"password": "password123"
}
Response (201):
{
"message": "User registered successfully",
"access_token": "eyJ0eXAiOiJKV1QiLCJhbGc...",
"user": {
"id": 1,
"username": "user@example.com"
}
}
POST /api/loginLogin with username and password.
Request Body:
{
"username": "user@example.com",
"password": "password123"
}
Response (200):
{
"message": "Login successful",
"access_token": "eyJ0eXAiOiJKV1QiLCJhbGc...",
"user": {
"id": 1,
"username": "user@example.com"
}
}
GET /api/login/googleInitiates Google authentication. Redirects user to Google for authorization.
GET /api/authorize/googleGoogle OAuth callback. Redirects to frontend with JWT token.
GET /api/protectedProtected route that requires a valid JWT token.
Headers:
Authorization: Bearer <token>
Response (200):
{
"message": "Authorized access",
"user": {
"id": 1,
"username": "user@example.com"
}
}
GET /api/user/profileGets the authenticated user's profile.
Headers:
Authorization: Bearer <token>
Response (200):
{
"user": {
"id": 1,
"username": "user@example.com"
}
}
GET /api/healthVerifies that the API is running.
Response (200):
{
"status": "ok",
"message": "Flask API running correctly"
}
After authenticating (login or Google), you'll receive an access_token. To access protected routes, include this token in the Authorization header:
Authorization: Bearer <access_token>
The token expires after 1 hour (3600 seconds). You can modify this in config.py.
/
├── database.py # Main Flask application with all routes
├── config.py # Application configuration
├── requirements.txt # Project dependencies
└── .env # Environment variables (not included in git)
password_hash = None)http://localhost:3000 (Next.js)This project is licensed under the MIT License - see the LICENSE file for details.
Diego Ivan Perea Montealegre
Created by Diego Ivan Perea Montealegre
Esta es una API REST construida con Flask que implementa dos métodos de autenticación:
python -m venv venv
source venv/bin/activate # En Windows: venv\Scripts\activate
o usar miniconda
conda create -n environment_name python=3.10
pip install -r requirements.txt
# for save list of packages
# pip freeze > requirements.txt
pip install -r requirements.txt
Crea un archivo .env en la raíz del proyecto con el siguiente contenido:
SECRET_KEY=tu-clave-secreta-aqui-cambiar-en-produccion
JWT_SECRET_KEY=tu-jwt-secreta-aqui-cambiar-en-produccion
DATABASE_URL=sqlite:///app.db
GOOGLE_CLIENT_ID=tu-google-client-id
GOOGLE_CLIENT_SECRET=tu-google-client-secret
CORS_ORIGINS=http://localhost:3000
http://localhost:5000/authorize/google.envCreate Google Console Project and enable Google+ API
Use Docker
#Comands for use docker container mysql
docker run --name mymysql -e MYSQL_ROOT_PASSWORD=mypassword -p 3306:3306 -d mysql:latest
docker exec -it mymysql bash
#Inside of the container mysql
mysql -u root -p
create database flaskmysql;
And your .env in DATABASE_URL wiil be
# posgresql example
DATABASE_URL= postgresql://postgres:mypassword@localhost:5432/flaskpostgresql
# mysql example
DATABASE_URL=mysql+pymysql://root:mypassword@localhost:3306/flaskmysql
python database.py
La API estará disponible en http://localhost:5000
POST /api/registerRegistra un nuevo usuario.
Request Body:
{
"username": "usuario@ejemplo.com",
"password": "contraseña123"
}
Response (201):
{
"message": "Usuario registrado exitosamente",
"access_token": "eyJ0eXAiOiJKV1QiLCJhbGc...",
"user": {
"id": 1,
"username": "usuario@ejemplo.com"
}
}
POST /api/loginInicia sesión con username y password.
Request Body:
{
"username": "usuario@ejemplo.com",
"password": "contraseña123"
}
Response (200):
{
"message": "Login exitoso",
"access_token": "eyJ0eXAiOiJKV1QiLCJhbGc...",
"user": {
"id": 1,
"username": "usuario@ejemplo.com"
}
}
GET /api/login/googleInicia el proceso de autenticación con Google. Redirige al usuario a Google para autorización.
GET /api/authorize/googleCallback de Google OAuth. Redirige al frontend con el token JWT.
GET /api/protectedRuta protegida que requiere un token JWT válido.
Headers:
Authorization: Bearer <token>
Response (200):
{
"message": "Acceso autorizado",
"user": {
"id": 1,
"username": "usuario@ejemplo.com"
}
}
GET /api/user/profileObtiene el perfil del usuario autenticado.
Headers:
Authorization: Bearer <token>
Response (200):
{
"user": {
"id": 1,
"username": "usuario@ejemplo.com"
}
}
GET /api/healthVerifica que la API está funcionando.
Response (200):
{
"status": "ok",
"message": "API Flask funcionando correctamente"
}
Después de autenticarte (login o Google), recibirás un access_token. Para acceder a rutas protegidas, incluye este token en el header Authorization:
Authorization: Bearer <access_token>
El token expira después de 1 hora (3600 segundos). Puedes modificar esto en config.py.
/
├── database.py # Aplicación Flask principal con todas las rutas
├── config.py # Configuración de la aplicación
├── requirements.txt # Dependencias del proyecto
└── .env # Variables de entorno (no incluido en git)
password_hash = None)http://localhost:3000 (Next.js)This project is licensed under the MIT License - see the LICENSE file for details.
Diego Ivan Perea Montealegre
Created by Diego Ivan Perea Montealegre
Selected from shared topics, language and repository description—not editorial ratings.
diegoperea20 /
This project implements Google authentication using exclusively the backend. The solution is developed with Flask as an API, fully handling the registration, authorization, and login processes through Google, without any frontend involvement in the authentication logic External fronted.