Introduction

Learn about Ask's built-in authentication system.

Ask has a built-in system for JWT (JSON Web Token) authentication. This system allows you to protect certain routes by requiring the requester to send a valid token along with their request.

The authentication system is pre-configured and included by default in all Ask applications. You don't have to set up anything to get started.

The system is designed to be flexible and easy to get up and running. We are going to use a database for storing user information in these docs, but that's not even needed. It is entirely possible to just make a basic authentication system where no user data is stored in between sessions (though, there's not really any point in doing that).

Technical

We are using PyJWT behind the scenes, which means that Ask's authentication is as secure as the PyJWT library.