Componentpedia / Listings / Flask-JWT-Extended

Last update: 24/05/2026

Flask-JWT-Extended

An open source Flask extension that provides JWT support (with batteries included)!

Latest version: 4.7.4 registry icon
Maintenance score
60
Safety score
100
Popularity score
76
Check your open source dependency risks. Get immediate insight about security, stability and licensing risks.
De-risk your app now
Security
  Vulnerabilities
Version Suggest Low Medium High Critical
4.7.4 0 0 0 0 0
4.7.3 0 0 0 0 0
4.7.1 0 0 0 0 0
4.7.0 0 0 0 0 0
4.6.0 0 0 0 0 0
4.5.3 0 0 0 0 0
4.5.2 0 0 0 0 0
4.5.1 0 0 0 0 0
4.4.4 0 0 0 0 0
4.4.3 0 0 0 0 0
4.4.2 0 0 0 0 0
4.4.1 0 0 0 0 0
4.4.0 0 0 0 0 0
4.3.1 0 0 0 0 0
4.3.0 0 0 0 0 0
4.2.3 0 0 0 0 0
4.2.2 0 0 0 0 0
4.2.1 0 0 0 0 0
4.2.0 0 0 0 0 0
4.1.0 0 0 0 0 0
4.0.2 0 0 0 0 0
4.0.0 0 0 0 0 0
3.25.1 0 0 0 0 0
3.25.0 0 0 0 0 0
3.24.1 0 0 0 0 0
3.24.0 0 0 0 0 0
3.23.0 0 0 0 0 0
3.22.0 0 0 0 0 0
3.21.0 0 0 0 0 0
3.20.0 0 0 0 0 0
3.19.0 0 0 0 0 0
3.18.2 0 0 0 0 0
3.18.1 0 0 0 0 0
3.18.0 0 0 0 0 0
3.17.0 0 0 0 0 0
3.16.0 0 0 0 0 0
3.15.0 0 0 0 0 0
3.14.0 0 0 0 0 0
3.13.1 0 0 0 0 0
3.13.0 0 0 0 0 0
3.12.1 0 0 0 0 0
3.12.0 0 0 0 0 0
3.11.0 0 0 0 0 0
3.10.0 0 0 0 0 0
3.9.1 0 0 0 0 0
3.8.2 0 0 0 0 0
3.8.1 0 0 0 0 0
3.8.0 0 0 0 0 0
3.7.2 0 0 0 0 0
3.7.1 0 0 0 0 0
3.7.0 0 0 0 0 0
3.6.0 0 0 0 0 0
3.5.1 0 0 0 0 0
3.5.0 0 0 0 0 0
3.4.0 0 0 0 0 0
3.3.4 0 0 0 0 0
3.3.3 0 0 0 0 0
3.3.1 0 0 0 0 0
3.3.0 0 0 0 0 0
3.2.0 0 0 0 0 0
3.1.1 0 0 0 0 0
3.1.0 0 0 0 0 0
3.0.0 0 0 0 0 0
2.4.1 0 0 0 0 0
2.4.0 0 0 0 0 0
2.3.0 0 0 0 0 0
2.2.0 0 0 0 0 0
2.1.1 0 0 0 0 0
2.1.0 0 0 0 0 0
2.0.0 0 0 0 0 0
1.5.0 0 0 0 0 0
1.4.2 0 0 0 0 0
1.4.1 0 0 0 0 0
1.4.0 0 0 0 0 0
1.3.2 0 0 0 0 0
1.3.1 0 0 0 0 0
1.3.0 0 0 0 0 0
1.2.1 0 0 0 0 0
1.2.0 0 0 0 0 0
1.1.0 0 0 0 0 0
1.0.3 0 0 0 0 0
1.0.2 0 0 0 0 0
1.0.1 0 0 0 0 0
0.0.9 0 0 0 0 0
0.0.8 0 0 0 0 0
0.0.7 0 0 0 0 0
0.0.6 0 0 0 0 0
0.0.5 0 0 0 0 0
0.0.4 0 0 0 0 0
0.0.3 0 0 0 0 0
0.0.2 0 0 0 0 0
0.0.1 0 0 0 0 0

Stability
Latest release:

4.7.4 - This version is safe to use because it has no known security vulnerabilities at this time. Find out if your coding project uses this component and get notified of any reported security vulnerabilities with Meterian-X Open Source Security Platform

Licensing

Maintain your licence declarations and avoid unwanted licences to protect your IP the way you intended.

MIT   -   MIT License

Not a wildcard

Not proprietary

OSI Compliant

Flask-JWT-Extended

Features

Flask-JWT-Extended not only adds support for using JSON Web Tokens (JWT) to Flask for protecting routes, but also many helpful (and optional) features built in to make working with JSON Web Tokens easier. These include:

  • Adding custom claims to JSON Web Tokens
  • Automatic user loading (current_user).
  • Custom claims validation on received tokens
  • Refresh tokens
  • First class support for fresh tokens for making sensitive changes.
  • Token revoking/blocklisting
  • Storing tokens in cookies and CSRF protection

Usage

View the documentation online

Upgrading from 3.x.x to 4.0.0

View the changes

Changelog

You can view the changelog here. This project follows semantic versioning.

Chatting

Come chat with the community or ask questions at https://discord.gg/EJBsbFd

Contributing

Before making any changes, make sure to install the development requirements and setup the git hooks which will automatically lint and format your changes.

pip install -r requirements.txt
pre-commit install

We require 100% code coverage in our unit tests. You can run the tests locally with tox which ensures that all tests pass, tests provide complete code coverage, documentation builds, and style guide are adhered to

tox

A subset of checks can also be ran by adding an argument to tox. The available arguments are:

  • py37, py38, py39, py310, py311, py312, pypy3
    • Run unit tests on the given python version
  • mypy
    • Run mypy type checking
  • coverage
    • Run a code coverage check
  • docs
    • Ensure documentation builds and there are no broken links
  • style
    • Ensure style guide is adhered to
tox -e py38

We also require features to be well documented. You can generate a local copy of the documentation by going to the docs directory and running:

make clean && make html && open _build/html/index.html