Remember me functionality in Flask - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to set a cookie named 'remember_token' with the user's token.

Flask

response.set_cookie('remember_token', [1])

Drag options to blanks, or click blank then click option'

Auser_token

Bsession_id

Ccsrf_token

Drequest_token

Attempts:

3 left

💡 Hint

Common Mistakes

Using session_id or csrf_token instead of the user's token.

The cookie should store the user's unique token to remember them.

2fill in blank

medium

Complete the code to check if the 'remember_token' cookie exists in the request.

Flask

if [1] in request.cookies:

Drag options to blanks, or click blank then click option'

A'remember_token'

Bsession

Cuser_token

D'csrf_token'

Attempts:

3 left

💡 Hint

Common Mistakes

Checking for 'session' or 'csrf_token' instead of 'remember_token'.

We check if the cookie named 'remember_token' is present in the request cookies.

3fill in blank

hard

Fix the error in this code that tries to set a cookie with expiration for 'remember me' functionality.

Flask

response.set_cookie('remember_token', token, max_age=[1])

Drag options to blanks, or click blank then click option'

A3600

B60*60*24*30

CNone

D60

Attempts:

3 left

💡 Hint

Common Mistakes

Using 3600 (1 hour) or 60 (1 minute) which is too short.

The cookie should last about 30 days, so max_age should be 60*60*24*30 seconds.

4fill in blank

hard

Fill both blanks to retrieve the token from the cookie and verify the user.

Flask

token = request.cookies.get([1])
user = User.query.filter_by([2]=token).first()

Drag options to blanks, or click blank then click option'

A'remember_token'

B'session_id'

Cremember_token

Dtoken

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'session_id' or 'remember_token' variable incorrectly.

We get the 'remember_token' cookie and use the variable 'token' to query the user.

5fill in blank

hard

Fill all three blanks to set a secure, HTTP-only cookie with a 7-day expiration.

Flask

response.set_cookie([1], [2], max_age=[3], secure=True, httponly=True)

Drag options to blanks, or click blank then click option'

A'remember_token'

Buser_token

C60*60*24*7

D'session_token'

Attempts:

3 left

💡 Hint

Common Mistakes

Using wrong cookie names or wrong max_age values.

The cookie name is 'remember_token', the value is the user's token, and max_age is 7 days in seconds.