Why email matters in web apps in Flask - Challenge Your Understanding

Challenge - 5 Problems

🧠 Conceptual

intermediate

Why do web apps commonly require email verification?

In web applications, why is email verification often required during user registration?

A To confirm the user owns the email and reduce fake accounts

B To speed up the app loading time

C To increase the number of users automatically

D To avoid using passwords altogether

💡 Hint

Think about why confirming contact info is important for trust and security.

Email verification helps confirm the user owns the email address, which reduces fake or spam accounts and allows secure communication.

❓ component_behavior

intermediate

What happens after sending a confirmation email in Flask?

In a Flask app, after sending a confirmation email with a token link, what should the app do when the user clicks the link?

A Log the user out of the app

B Delete the user account immediately

C Verify the token, activate the user account, and redirect to login

D Send another confirmation email automatically

💡 Hint

Think about what confirming an email means for the user's account status.

Clicking the confirmation link verifies the token, activates the account, and usually redirects the user to login or a welcome page.

📝 Syntax

advanced

Identify the correct Flask code to send an email

Which Flask code snippet correctly sends an email using Flask-Mail?

Flask

from flask_mail import Mail, Message

mail = Mail(app)

msg = Message('Hello', sender='[e-mail]', recipients=['[e-mail]'])
msg.body = 'Welcome to our app!'

# Which line sends the email?

A mail.send_message(msg)

B mail.send_mail(msg)

C mail.send_email(msg)

D mail.send(msg)

💡 Hint

Check Flask-Mail documentation for the method to send a Message object.

The correct method to send an email message in Flask-Mail is mail.send(msg).

❓ state_output

advanced

What is the user status after email confirmation?

Given a Flask app where users start with is_active = False, what is the value of is_active after the user clicks the email confirmation link?

Flask

user = User.query.filter_by(email='[e-mail]').first()
# Initially user.is_active == False
# After confirmation link is clicked:
user.is_active = True

print(user.is_active)

A True

B False

C None

D Raises AttributeError

💡 Hint

Think about what the confirmation link does to the user's active status.

Clicking the confirmation link sets is_active to True, activating the user account.

🔧 Debug

expert

Why does this Flask email confirmation fail to activate the user?

Consider this Flask route handling email confirmation:

@app.route('/confirm/')
def confirm_email(token):
    user = User.verify_token(token)
    if user:
        user.is_active = True
        db.session.commit()
        return 'Confirmed'
    return 'Invalid token'

Why might the user account not activate after clicking the link?

Flask

@app.route('/confirm/<token>')
def confirm_email(token):
    user = User.verify_token(token)
    if user:
        user.is_active = True
        db.session.commit()
        return 'Confirmed'
    return 'Invalid token'

A db.session.commit() is missing

B User.verify_token returns a new user object not linked to the session

C The route URL is incorrect

D user.is_active is set to False instead of True

💡 Hint

Consider how the user object returned by verify_token relates to the database session.

If User.verify_token returns a user object not attached to the current database session, changes like user.is_active = True won't persist after commit.