Question

What’s the common approach of adding access control to a blueprint in Flask?

For example I have a blueprint called admin with url_prefix='/admin'

How do I force all views under /admin must be authenticated superuser first?

Answer 1

Found it http://flask.pocoo.org/snippets/59/

from flask import Blueprint
from flask import redirect, request
from google.appengine.api import users

bp = Blueprint('admin', __name__)

@bp.before_request
def restrict_bp_to_admins():
    if not users.is_current_user_admin():
        return redirect(users.create_login_url(request.url))