Secret key configuration in Flask - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to set the secret key for a Flask app.

Flask

app = Flask(__name__)
app.secret_key = '[1]'

Drag options to blanks, or click blank then click option'

ATrue

B12345

CNone

D'mysecretkey123'

Attempts:

3 left

💡 Hint

Common Mistakes

Using a number instead of a string

Leaving the secret key as None

Using a boolean value

The secret key must be a string used by Flask to secure sessions and cookies.

2fill in blank

medium

Complete the code to import the module needed to generate a random secret key.

Flask

import [1]
app.secret_key = os.urandom(24)

Drag options to blanks, or click blank then click option'

Aos

Bsys

Crandom

Dflask

Attempts:

3 left

💡 Hint

Common Mistakes

Importing random instead of os

Importing sys or flask which don't have urandom

The os module provides the urandom function to generate random bytes for the secret key.

3fill in blank

hard

Fix the error in setting the secret key to a byte string.

Flask

app.secret_key = [1]'supersecret'

Drag options to blanks, or click blank then click option'

Arb

B'b'

Cb

Dbr

Attempts:

3 left

💡 Hint

Common Mistakes

Using quotes around b

Using 'rb' or 'br' which are invalid here

The prefix b before the string literal indicates a byte string in Python.

4fill in blank

hard

Fill both blanks to set the secret key from an environment variable.

Flask

import [1]
app.secret_key = os.[2]('SECRET_KEY')

Drag options to blanks, or click blank then click option'

Aos

Bgetenv

Cgetenvs

Denviron

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'getenvs' which does not exist

Using 'environ' directly without calling getenv

Use the os module and its getenv function to read environment variables.

5fill in blank

hard

Fill all three blanks to create a Flask app with a secret key from environment or fallback.

Flask

import [1]
app = Flask(__name__)
app.secret_key = os.[2]('SECRET_KEY', [3])

Drag options to blanks, or click blank then click option'

Aos

Bgetenv

C'defaultsecretkey'

D'SECRET_KEY'

Attempts:

3 left

💡 Hint

Common Mistakes

Using the environment variable name as the default value

Not providing a fallback value

This code imports os, creates the app, and sets the secret key from the environment variable SECRET_KEY or uses a default string if not set.

Practice

1. What is the main purpose of setting a SECRET_KEY in a Flask application?

easy

A. To secure sessions and cookies by signing them

B. To define the database connection string

C. To set the port number for the Flask server

D. To specify the template folder location

Solution

1. Step 1: Understand the role of SECRET_KEY in Flask

   The SECRET_KEY is used to sign session cookies and protect data from tampering.

2. Step 2: Identify the correct purpose

   It does not relate to database, port, or templates but to security of sessions and cookies.

3. Final Answer:

   To secure sessions and cookies by signing them -> Option A

4. Quick Check:

   SECRET_KEY secures sessions = A [OK]

Hint: SECRET_KEY protects sessions and cookies [OK]

Common Mistakes:

• Confusing SECRET_KEY with database settings
• Thinking SECRET_KEY sets server port
• Assuming SECRET_KEY defines template paths

2. Which of the following is the correct way to set a secret key in a Flask app?

easy

A. app.secretkey = 'mysecret'

B. app.SECRET_KEY = 'mysecret'

C. app.config['secret_key'] = 'mysecret'

D. app.config['SECRET_KEY'] = 'mysecret'

Solution

1. Step 1: Recall Flask config key names

   Flask expects the secret key to be set in uppercase as SECRET_KEY in the config dictionary.

2. Step 2: Check syntax correctness

   Only app.config['SECRET_KEY'] = 'mysecret' uses correct case and syntax.

3. Final Answer:

   app.config['SECRET_KEY'] = 'mysecret' -> Option D

4. Quick Check:

   Config keys are uppercase = D [OK]

Hint: Use uppercase 'SECRET_KEY' in app.config [OK]

Common Mistakes:

• Using lowercase 'secret_key' instead of uppercase
• Assigning secret_key directly to app object
• Using wrong attribute names like SECRET_KEY property

3. Given this Flask code snippet, what will print(app.secret_key) output?

from flask import Flask
app = Flask(__name__)
app.config['SECRET_KEY'] = 'abc123'
print(app.secret_key)

medium

A. None

B. KeyError

C. 'abc123'

D. AttributeError

Solution

1. Step 1: Understand Flask secret key access

   app.secret_key is a property that returns the value from app.config['SECRET_KEY'] if set.

2. Step 2: Check the code execution

   Since app.config['SECRET_KEY'] is set to 'abc123', app.secret_key returns 'abc123' and print outputs abc123 (denoted as "'abc123'" in options).

3. Final Answer:

   'abc123' -> Option C

4. Quick Check:

   app.secret_key reads from config['SECRET_KEY'] = A [OK]

Hint: app.secret_key property returns app.config['SECRET_KEY'] [OK]

Common Mistakes:

• Thinking app.secret_key defaults to None despite config set
• Expecting KeyError when accessing app.secret_key
• Expecting AttributeError for app.secret_key

4. Identify the error in this Flask secret key setup:

app = Flask(__name__)
app.config['SECRET_KEY'] = os.environ['SECRET']

Assuming os is not imported.

medium

A. SECRET_KEY should be lowercase

B. os module is not imported causing NameError

C. SECRET environment variable is not a valid key name

D. SECRET_KEY must be set after app.run()

Solution

1. Step 1: Check for missing imports

   The code uses os.environ but does not import the os module, causing a NameError.

2. Step 2: Validate other options

   SECRET_KEY is case-sensitive and correct as uppercase; environment variable name is valid; setting SECRET_KEY after app.run() is incorrect practice.

3. Final Answer:

   os module is not imported causing NameError -> Option B

4. Quick Check:

   Missing import os causes error = A [OK]

Hint: Always import os before using os.environ [OK]

Common Mistakes:

• Using lowercase 'secret_key' instead of uppercase
• Assuming environment variable name must be SECRET_KEY
• Setting SECRET_KEY after app.run()

5. You want to securely set the Flask SECRET_KEY using an environment variable but provide a fallback for development. Which code snippet correctly achieves this?

hard

A. app.config['SECRET_KEY'] = os.getenv('SECRET_KEY', 'dev_secret')

B. app.config['SECRET_KEY'] = os.environ['SECRET_KEY'] or 'dev_secret'

C. app.config['SECRET_KEY'] = 'dev_secret' if os.getenv('SECRET_KEY') else os.getenv('SECRET_KEY')

D. app.config['SECRET_KEY'] = os.environ.get('SECRET_KEY') and 'dev_secret'

Solution

1. Step 1: Understand environment variable retrieval methods

   os.getenv('SECRET_KEY', 'dev_secret') returns the environment variable if set, else returns the fallback 'dev_secret'.

2. Step 2: Analyze other options

   A raises KeyError if missing; C reverses fallback logic ('dev_secret' if set, None if missing); D misuses 'and', returning 'dev_secret' if set, None if missing.

3. Final Answer:

   app.config['SECRET_KEY'] = os.getenv('SECRET_KEY', 'dev_secret') -> Option A

4. Quick Check:

   Use os.getenv with fallback = B [OK]

Hint: Use os.getenv with default fallback for safe secret key [OK]

Common Mistakes:

• Using os.environ without fallback causing errors
• Reversing fallback logic in conditional expressions
• Misusing logical operators for fallback values