Flask (web framework)

Flask (web framework)
Name	Flask
Developer	Armin Ronacher
Initial release	2010
Programming language	Python
License	BSD-3-Clause
Website	flask.palletsprojects.com

Flask (web framework) Flask is a lightweight web framework for the Python (programming language) ecosystem created by Armin Ronacher and later maintained by the Pallets Projects community. It emphasizes simplicity and extensibility, drawing inspiration from Werkzeug and Jinja while fitting into workflows used by organizations such as Pinterest, Twilio, Reddit, Netflix, and LinkedIn. Flask sits alongside frameworks like Django (web framework), Bottle (web framework), CherryPy, Tornado (web server), and Pyramid (web framework) in serving web applications and APIs for projects associated with NASA, Mozilla Foundation, Dropbox, and Rackspace.

History

Flask originated during a 2010 experiment by Armin Ronacher while contributing to projects at Pallets Projects and interacting with developers from Symfony and Ruby on Rails, influenced by microframework discussions involving Jacob Kaplan-Moss and Adrian Holovaty. Early adopters included developers from Heroku, DigitalOcean, Linode, Canonical (company), and contributors from OpenStack and SaltStack. Flask's growth paralleled interest from companies such as Instagram, Pinterest, and Airbnb that favored rapid prototyping endorsed in communities around PyCon and EuroPython. Over time stewardship transitioned through volunteers affiliated with Python Software Foundation and maintainers associated with Pallets Projects, while documentation practices reflected standards seen at Read the Docs and GitHub.

Architecture and Components

Flask builds on the Werkzeug WSGI utility library, which interoperates with servers like Gunicorn, uWSGI, Waitress, and mod_wsgi used by Apache HTTP Server and Nginx. The templating system is provided by Jinja (template engine), with routing, request, and response abstractions interoperable with patterns familiar to users of PSF-endorsed tools and influenced by conventions from WSGI and ASGI discussions at IETF. Core components include a minimal application object similar in concept to constructs in Bottle (web framework) and middleware support analogous to Rack (web server interface) used by Ruby (programming language). Flask's blueprint system enables modular design used for large systems at Google, Facebook, Microsoft, and research at MIT and Stanford University.

Features and Extensions

Flask provides routing, request handling, session management, and templating, comparable to features in Django (web framework) and lighter than monolithic stacks like Ruby on Rails. A vibrant extension ecosystem developed by contributors from PyPI, Bitbucket, GitHub, and organizations including Canonical (company) and Red Hat offers libraries such as integration for SQLAlchemy, Peewee (ORM), Alembic, Flask-RESTful, Flask-WTF, Flask-Login, Flask-Migrate, Flask-Security, and adapters for Celery (software) and Redis. Extensions facilitate authentication patterns inspired by OAuth and OpenID Connect standards used by Google, Facebook, Twitter, GitHub, and Okta. Testing integrations align with practices from pytest, unittest, and continuous integration services like Travis CI, CircleCI, and GitLab CI/CD.

Development and Deployment

During development Flask's built-in server and debugger are commonly used at events like Hackathons and teaching at University of California, Berkeley, Harvard University, and Massachusetts Institute of Technology. Production deployments typically pair Flask applications with servers such as Gunicorn or uWSGI behind reverse proxies like Nginx or HAProxy, with orchestration by Docker, Kubernetes, AWS Elastic Beanstalk, Google Cloud Platform, Azure App Service, or Heroku. Continuous delivery pipelines adopt practices from DevOps tooling by teams at Spotify, Etsy, and Shopify, and observability integrates with services from Datadog, New Relic, Prometheus, and Grafana. Packaging and distribution rely on pip and virtualenv workflows rooted in standards promoted by the Python Software Foundation and showcased at conferences like PyCon and FOSDEM.

Reception and Usage

Flask has been praised by developers at Stack Overflow, Hacker News, and contributors from GitHub for its minimalism and flexibility compared with Django (web framework) and Express (web framework). Academic courses at Stanford University, Carnegie Mellon University, and Imperial College London use Flask for web programming assignments alongside resources from O'Reilly Media and Packt Publishing. Major deployments have been reported at companies including Netflix, LinkedIn, Reddit, Twilio, Pinterest, and Lyft, and it has been used in scientific projects associated with NASA, CERN, Los Alamos National Laboratory, and Bell Labs. Community metrics on PyPI and GitHub show active issue trackers, pull requests, and contributions from developers affiliated with Mozilla Foundation, Dropbox, Canonical (company), and the Python Software Foundation.

Security Considerations

Security practices for Flask align with guidance from Open Web Application Security Project and recommendations used by teams at Google and Microsoft. Preventive measures include input validation, use of secure session cookies, cross-site request forgery protections implemented via extensions used by Facebook and Twitter, and templating autoescaping inherited from Jinja as practiced in production at LinkedIn and Instagram. Deployment hardening often follows standards from CIS benchmarks and incident response patterns described by SANS Institute, with vulnerability disclosure coordinated through platforms like GitHub and advisories from the National Vulnerability Database and CERT Coordination Center.

Category:Python (programming language) web frameworks