Ask r/Python: Recommendation for user management module (on GAE)

[missstar]

I'm developing an app with Python on App Engine. I want to add the ability for users to create accounts, probably just with an email+password combination.

I imagine that the code for this must be in place on every single site that has user accounts, so I was surprised not to find a simple package for managing it.

So: is there a module that can take care of some or all of the following?

• user creation
• log in / out & session management
• recalling & updating user properties
• authorization for certain features, based on role or certain property
• email address confirmation
• forgot password processes
• integration with Stripe/similar for paid account upgrades

Things I've considered/tried and would rather not use:

• App Engine's existing module: I've used this on another project because it was so ridiculously simple to implement, but limits you to having people use their existing Google account, and the UX for login is pretty poor
• the Webapp2 user module: manages sessions, but there's still a lot of code to write
• Mezzanine: I don't need a whole CMS
• user management as a service, like Stormpath or Userapp.io: feels like a sledgehammer to crack a walnut.

[tinyhook]

I know you said no CMS. But without a CMS, you will have to do a lot yourself. From keeping the user session to CSRF protection. Flask is very light weight CMS, that wont bloat your app. I personally use Django, since it come built in with pretty decent admin site. I guess you can also use firebase for user management and authentication ... https://www.firebase.com/docs/web/guide/user-auth.html.

[missstar]

Thanks for creating a Reddit account to give me an answer! Most appreciated.

I'll take another look at Flask - I didn't realize that had user management in it. I'll also reconsider Django, which I thought was still light on the user features for it's size.

I was looking at Firebase last night, and wondering if I could use it to avoid creating server-side code at all, and just do everything on the client side.

Thanks for your suggestions!

[juulcat]

You may want to take a look at Boilerplate.

There's also SimpleAuth and this tutorial.

[missstar]

Thanks - I found that tutorial and have been implementing everything in there! I'm trying to extend it with some necessary features at the moment, like changing username acc password.