Making flask app secure
Hello I have a simple flask app that is triggering some devices in my facility. I currently have cors and a secret-key needed in header in order for request to go through.
How can I make my flask app more secure? do I need to set up gunicorn and nginx when deploying on railway? Open to any advice thank you
ps. I am not expecting a ton of traffic to be hitting my endpoint
9 Replies
Project ID:
N/A
You might find these helpful:
- Setting up flask server
- Trying to increase the time a POST request stays open in railway with flask
⚠️ experimental feature
N/A
you dont already have gunicorn?
no 😅
so you're using flasks in-built server?
atm yes
funky
use gunicorn, though it's not like that increases security
I'm sure there's lots of tutorials on securing a flask + gunicorn app
yeah going to do some digging , thanks for the tips