Protected static files with a flask

Question

I am creating a flash application and I want it to serve some static files only if the user is authenticated. This is a very low traffic application (internal use only). How can i do this? One thing that I was thinking about is to use serve_static () and put it for authentication, but it uses a static directory in which the checkbox already serves the content.

Answer 1

Just subclass flask.Flask and override the send_static_file method:

 class SecuredStaticFlask(Flask): def send_static_file(self, filename): # Get user from session if user.is_authenticated(): return super(SecuredStaticFlask, self).send_static_file(filename) else: abort(403) # Or 401 (or 404), whatever is most appropriate for your situation 

See also definition of send_static_file and following