How often do you need to limit access to a Web app to few people? Very often, right? Sometimes it doesn't make sense to implement full-blown users management and authorization. All you need is login and password prompt and credentials storage for a few people. I faced the same problem in an ongoing pet project of mine and decided to go with basic HTTP auth with a plain old htpasswd file storing user credentials.
I did some research followed by some hacking and decided to package my code into a Flask extension so I can reuse the solution in other apps. Flask-HTAuth is the result of my development.
The extension is dead simple to integrate, supports Apache htpasswd files (minus plaintext passwords) and allows an app to choose which view functions should be protected. Exactly what my case required.
Install it with the usual:
$ pip install flask-htauthLearn more from the docs. Get the code, fork the project and issue pull requests on the project's repository on GitHub.
Have fun!