Skip to content

First Steps

Let's start with a simple example that shows how to add FlaskAPI Guard to your application.

Create a Flask application

First, create a new Flask application:

from flask import Flask
from flaskapi_guard import FlaskAPIGuard
from flaskapi_guard import SecurityConfig
from flaskapi_guard import IPInfoManager

app = Flask(__name__)

Configure Security Settings

Create a SecurityConfig instance with your desired settings:

config = SecurityConfig(
    geo_ip_handler=IPInfoManager("your_ipinfo_token_here"),
    enable_redis=True,
    redis_url="redis://localhost:6379",
    rate_limit=100,
    auto_ban_threshold=10,
    custom_log_file="security.log",
)

Note: FlaskAPI Guard only loads resources as needed. The IPInfo database is only downloaded when country filtering is configured, and cloud IP ranges are only fetched when cloud provider blocking is enabled.

Add the Extension

Add the security extension to your application:

FlaskAPIGuard(app, config=config)

Complete Example

Here's a complete example showing basic usage:

from flask import Flask, jsonify
from flaskapi_guard import FlaskAPIGuard
from flaskapi_guard import SecurityConfig
from flaskapi_guard import IPInfoManager

app = Flask(__name__)

config = SecurityConfig(
    geo_ip_handler=IPInfoManager("your_ipinfo_token_here"),
    enable_redis=True,  # Redis enabled
    redis_url="redis://localhost:6379",
    whitelist=["192.168.1.1", "2001:db8::1"],
    blacklist=["10.0.0.1", "2001:db8::2"],
    blocked_countries=["AR", "IT"],
    rate_limit=100,
    custom_log_file="security.log"
)

FlaskAPIGuard(app, config=config)

@app.route("/")
def root():
    return jsonify(message="Hello World")

Run the Application

Run your application using gunicorn:

gunicorn main:app --reload

Your API is now protected by FlaskAPI Guard!

What's Next