Update README.rst with some notes on security.

This closes #7.
This commit is contained in:
Marc Brinkmann
2014-02-22 16:55:04 +01:00
parent 6217898a50
commit 800e250d12
+12
View File
@@ -62,3 +62,15 @@ Install
Installation is simple too::
$ pip install Flask-SSLify
Security consideration using basic auth
---------------------------------------
When using basic auth, it is important that the redirect occurs before the user is prompted for
credentials. Flask-SSLify registers a ``before_request`` handler, to make sure this handler gets
executed before credentials are entered it is advisable to not prompt for any authentication
inside a ``before_request`` handler.
The example found at http://flask.pocoo.org/snippets/8/ works nicely, as the view function's
decorator will never have an effect before the ``before_request`` hooks are executed.