Current_user object in Flask - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ component_behavior

intermediate

What does current_user.is_authenticated return?

In a Flask app using Flask-Login, what is the value of current_user.is_authenticated when a user is logged in?

A Raises AttributeError

B False

C None

D True

💡 Hint

Think about what Flask-Login sets when a user is logged in.

The current_user.is_authenticated property returns True if the user is logged in. It is False for anonymous users.

❓ state_output

intermediate

What is the output of accessing current_user.name before login?

Given this Flask route:

from flask_login import current_user

@app.route('/')
def index():
    return current_user.name

What happens if no user is logged in and this route is accessed?

Flask

from flask_login import current_user

@app.route('/')
def index():
    return current_user.name

A Returns 'AnonymousUserMixin'

B Raises AttributeError

C Returns None

D Returns empty string

💡 Hint

Anonymous users do not have a 'name' attribute by default.

The current_user for anonymous users is an instance of AnonymousUserMixin, which does not have a name attribute. Accessing it raises AttributeError.

📝 Syntax

advanced

Which code correctly checks if current_user is authenticated and has role 'admin'?

Select the option that correctly checks if the logged-in user is authenticated and has the role 'admin'. Assume current_user.role holds the user's role as a string.

A if current_user.is_authenticated and current_user.role == 'admin':

B if current_user.is_authenticated or current_user.role == 'admin':

C if current_user.is_authenticated and current_user.role = 'admin':

D if current_user.is_authenticated & current_user.role == 'admin':

💡 Hint

Use the correct logical operator and comparison syntax.

Option A uses and to check both conditions and == for comparison, which is correct. Option A uses or which is wrong logic. Option A uses assignment = instead of comparison. Option A uses bitwise & which is invalid here.

🔧 Debug

advanced

Why does current_user always appear anonymous in this Flask app?

A developer notices that current_user.is_authenticated is always False even after login. Which of these is the most likely cause?

A The user_loader callback is not set up correctly

B The Flask app is missing a secret key

C The login route does not call login_user()

D The current_user object is not imported

💡 Hint

Flask-Login needs to reload user from session using user_loader.

If the user_loader callback is missing or incorrect, Flask-Login cannot load the user from the session, so current_user remains anonymous.

🧠 Conceptual

expert

What is the role of current_user in Flask-Login's request lifecycle?

Choose the best description of how current_user works during a Flask request when using Flask-Login.

A <code>current_user</code> is a global variable set once at app startup and never changes

B <code>current_user</code> is a function that must be called to get the user object

C <code>current_user</code> is a proxy that loads the user from the session on each request and provides user info

D <code>current_user</code> stores the user password in plain text for quick access

💡 Hint

Think about how Flask-Login manages user state per request.

current_user is a special proxy object that loads the user from the session cookie on every request, so it always reflects the current logged-in user or anonymous user.

Practice

1. What does the current_user object represent in a Flask app?

easy

A. A list of all users in the database

B. The admin user only

C. The user who is currently logged in

D. A random user from the database

Solution

1. Step 1: Understand the purpose of current_user

   The current_user object is provided by Flask-Login to represent the user who is currently logged in to the app.

2. Step 2: Compare options with this meaning

   Only the user who is currently logged in correctly describes current_user as the user currently logged in. Other options describe unrelated concepts.

3. Final Answer:

   The user who is currently logged in -> Option C

4. Quick Check:

   current_user = logged-in user [OK]

Hint: Remember: current_user means the active logged-in user [OK]

Common Mistakes:

• Thinking current_user is a list of users
• Confusing current_user with admin user only
• Assuming current_user is random

2. Which import is required to use current_user in a Flask app?

easy

A. from flask_login import current_user

B. from flask import current_user

C. import current_user from flask

D. from flask_login import login_user

Solution

1. Step 1: Identify the correct module for current_user

   The current_user object is part of the Flask-Login extension, so it must be imported from flask_login.

2. Step 2: Check the import syntax

   from flask_login import current_user uses the correct syntax: from flask_login import current_user. Other options either import from the wrong place or use incorrect syntax.

3. Final Answer:

   from flask_login import current_user -> Option A

4. Quick Check:

   Import current_user from flask_login [OK]

Hint: Import current_user from flask_login, not flask [OK]

Common Mistakes:

• Importing current_user from flask instead of flask_login
• Using incorrect import syntax
• Confusing login_user with current_user

3. Given this Flask route code:

@app.route('/profile')
@login_required
def profile():
    return f"Hello, {current_user.username}!"

What will be the output if a logged-in user has username 'Alice'?

medium

A. Hello, Alice!

B. Hello, current_user!

C. Hello, None!

D. Error: current_user not defined

Solution

1. Step 1: Understand the use of @login_required and current_user

   The decorator @login_required ensures only logged-in users can access the route. current_user.username accesses the username of the logged-in user.

2. Step 2: Substitute the username value

   Since the logged-in user's username is 'Alice', the returned string will be "Hello, Alice!".

3. Final Answer:

   Hello, Alice! -> Option A

4. Quick Check:

   Logged-in username shown correctly [OK]

Hint: Use @login_required to safely access current_user.username [OK]

Common Mistakes:

• Forgetting @login_required causes errors
• Using current_user without .username
• Expecting literal 'current_user' in output

4. What is the likely cause of this error in a Flask app?

RuntimeError: Working outside of request context.

Code snippet:

print(current_user.is_authenticated)

medium

A. User is not logged in

B. Missing import of current_user

C. Flask app not running

D. Trying to access current_user outside a request or route

Solution

1. Step 1: Understand the error message

   The error "Working outside of request context" means code is trying to use request-specific objects like current_user outside a web request or route function.

2. Step 2: Identify cause related to current_user

   Accessing current_user must happen inside a route or request context. Printing it outside causes this runtime error.

3. Final Answer:

   Trying to access current_user outside a request or route -> Option D

4. Quick Check:

   current_user needs request context [OK]

Hint: Use current_user only inside routes or request context [OK]

Common Mistakes:

• Assuming missing import causes this error
• Thinking user login status causes this error
• Believing app not running causes this error

5. You want to show a special message only to logged-in users using current_user. Which code snippet correctly checks login status before showing the message?

hard

A. if current_user:
print('Welcome back!')
else:
print('Please log in.')

B. if current_user.is_authenticated:
print('Welcome back!')
else:
print('Please log in.')

C. if current_user.logged_in:
print('Welcome back!')
else:
print('Please log in.')

D. if current_user.is_active:
print('Welcome back!')
else:
print('Please log in.')

Solution

1. Step 1: Identify the correct property to check login status

   The current_user object has a property is_authenticated that returns True if the user is logged in.

2. Step 2: Verify the code snippet uses is_authenticated properly

   if current_user.is_authenticated: print('Welcome back!') else: print('Please log in.') uses current_user.is_authenticated correctly to decide which message to print. Other options use incorrect or non-existent properties.

3. Final Answer:

   if current_user.is_authenticated: print('Welcome back!') else: print('Please log in.') -> Option B

4. Quick Check:

   Use is_authenticated to check login [OK]

Hint: Check current_user.is_authenticated for login status [OK]

Common Mistakes:

• Using current_user.logged_in instead of is_authenticated
• Checking current_user directly without property
• Confusing is_active with login status