Welcome, aspiring web developers! Building a web application is an exciting journey, and a crucial part of almost any app is knowing who your users are. This is where “authentication” comes into play. If you’ve ever logged into a website, you’ve used an authentication system. In this comprehensive guide, we’ll explore how to add a robust and secure authentication system to your Flask application. We’ll break down complex ideas into simple steps, making it easy for even beginners to follow along.

What is Authentication?

Before we dive into the code, let’s clarify what authentication really means.

Authentication is the process of verifying a user’s identity. Think of it like showing your ID to prove who you are. When you enter a username and password into a website, the website performs authentication to make sure you are indeed the person associated with that account.

It’s often confused with Authorization, which happens after authentication. Authorization determines what an authenticated user is allowed to do. For example, a regular user might only be able to view their own profile, while an administrator can view and edit everyone’s profiles. For this guide, we’ll focus primarily on authentication.

Why Flask for Authentication?

Flask is a “microframework” for Python, meaning it provides just the essentials to get a web application running, giving you a lot of flexibility. This flexibility extends to authentication. While Flask doesn’t have a built-in authentication system, it’s very easy to integrate powerful extensions that handle this for you securely. This allows you to choose the tools that best fit your project, rather than being locked into a rigid structure.

Core Concepts of Flask Authentication

To build an authentication system, we need to understand a few fundamental concepts:

• User Management: This involves storing information about your users, such as their usernames, email addresses, and especially their passwords (in a secure, hashed format).
• Password Hashing: You should never store plain text passwords in your database. Instead, you hash them. Hashing is like turning a password into a unique, fixed-length string of characters that’s almost impossible to reverse engineer. When a user tries to log in, you hash their entered password and compare it to the stored hash. If they match, the password is correct.
• Sessions: Once a user logs in, how does your application remember them as they navigate from page to page? This is where sessions come in. A session is a way for the server to store information about a user’s current interaction with the application. Flask uses cookies (small pieces of data stored in the user’s browser) to identify a user’s session.
• Forms: Users interact with the authentication system through forms, typically for registering a new account and logging in.

Prerequisites

Before we start coding, make sure you have the following:

• Python 3: Installed on your computer.
• Flask: Installed in a virtual environment.
• Basic understanding of Flask: How to create routes and render templates.

If you don’t have Flask installed, you can do so like this:

python3 -m venv venv

source venv/bin/activate  # On macOS/Linux

pip install Flask

We’ll also need a popular Flask extension called Flask-Login, which simplifies managing user sessions and login states.

pip install Flask-Login

And for secure password hashing, Flask itself provides werkzeug.security (which Flask-Login often uses or complements).

Step-by-Step Implementation Guide

Let’s build a simple Flask application with registration, login, logout, and protected routes.

1. Project Setup

First, create a new directory for your project and inside it, create app.py and a templates folder.

flask_auth_app/
├── app.py
└── templates/
    ├── base.html
    ├── login.html
    ├── register.html
    └── dashboard.html

2. Basic Flask App and Flask-Login Initialization

Let’s set up our app.py with Flask and initialize Flask-Login.

from flask import Flask, render_template, redirect, url_for, flash, request
from flask_login import LoginManager, UserMixin, login_user, logout_user, login_required, current_user
from werkzeug.security import generate_password_hash, check_password_hash

app = Flask(__name__)
app.config['SECRET_KEY'] = 'your_secret_key_here' # IMPORTANT: Change this to a strong, random key in production!

login_manager = LoginManager()
login_manager.init_app(app)
login_manager.login_view = 'login' # The name of the route function for logging in

users = {} # Stores user objects by id: {1: User_object_1, 2: User_object_2}
user_id_counter = 0 # To assign unique IDs

class User(UserMixin):
    def __init__(self, id, username, password_hash):
        self.id = id
        self.username = username
        self.password_hash = password_hash

    @staticmethod
    def get(user_id):
        return users.get(int(user_id))

@login_manager.user_loader
def load_user(user_id):
    """
    This function tells Flask-Login how to load a user from the user ID stored in the session.
    """
    return User.get(user_id)

@app.route('/')
def index():
    return render_template('base.html')

if __name__ == '__main__':
    app.run(debug=True)

Explanation:

• SECRET_KEY: This is a very important configuration. Flask uses it to securely sign session cookies. Never share this key, and use a complex, randomly generated one in production.
• LoginManager: We create an instance of Flask-Login’s manager and initialize it with our Flask app.
• login_manager.login_view = 'login': If an unauthenticated user tries to access a @login_required route, Flask-Login will redirect them to the route named 'login'.
• users and user_id_counter: These simulate a database. In a real app, you’d use a proper database (like SQLite, PostgreSQL) with an ORM (Object-Relational Mapper) like SQLAlchemy.
• User(UserMixin): Our User class inherits from UserMixin, which provides default implementations for properties and methods Flask-Login expects (like is_authenticated, is_active, is_anonymous, get_id()).
• @login_manager.user_loader: This decorator registers a function that Flask-Login will call to reload the user object from the user ID stored in the session.

3. Creating HTML Templates

Let’s create the basic HTML files in the templates folder.

templates/base.html

This will be our base layout, with navigation and flash messages.

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Flask Auth App</title>
    <style>
        body { font-family: Arial, sans-serif; margin: 20px; background-color: #f4f4f4; }
        nav { background-color: #333; padding: 10px; margin-bottom: 20px; }
        nav a { color: white; margin-right: 15px; text-decoration: none; }
        nav a:hover { text-decoration: underline; }
        .container { max-width: 800px; margin: auto; background-color: white; padding: 20px; border-radius: 8px; box-shadow: 0 0 10px rgba(0,0,0,0.1); }
        form div { margin-bottom: 15px; }
        label { display: block; margin-bottom: 5px; font-weight: bold; }
        input[type="text"], input[type="password"] { width: 100%; padding: 10px; border: 1px solid #ddd; border-radius: 4px; box-sizing: border-box; }
        input[type="submit"] { background-color: #007bff; color: white; padding: 10px 15px; border: none; border-radius: 4px; cursor: pointer; font-size: 16px; }
        input[type="submit"]:hover { background-color: #0056b3; }
        .flash { padding: 10px; margin-bottom: 10px; border-radius: 4px; }
        .flash.success { background-color: #d4edda; color: #155724; border: 1px solid #c3e6cb; }
        .flash.error { background-color: #f8d7da; color: #721c24; border: 1px solid #f5c6cb; }
    </style>
</head>
<body>
    <nav>
        <a href="{{ url_for('index') }}">Home</a>
        {% if current_user.is_authenticated %}
            <a href="{{ url_for('dashboard') }}">Dashboard</a>
            <a href="{{ url_for('logout') }}">Logout</a>
            <span>Hello, {{ current_user.username }}!</span>
        {% else %}
            <a href="{{ url_for('login') }}">Login</a>
            <a href="{{ url_for('register') }}">Register</a>
        {% endif %}
    </nav>
    <div class="container">
        {% with messages = get_flashed_messages(with_categories=true) %}
            {% if messages %}
                <ul class="flashes">
                    {% for category, message in messages %}
                        <li class="flash {{ category }}">{{ message }}</li>
                    {% endfor %}
                </ul>
            {% endif %}
        {% endwith %}
        {% block content %}{% endblock %}
    </div>
</body>
</html>

templates/register.html

{% extends "base.html" %}

{% block content %}
    <h2>Register</h2>
    <form method="POST" action="{{ url_for('register') }}">
        <div>
            <label for="username">Username:</label>
            <input type="text" id="username" name="username" required>
        </div>
        <div>
            <label for="password">Password:</label>
            <input type="password" id="password" name="password" required>
        </div>
        <div>
            <input type="submit" value="Register">
        </div>
    </form>
{% endblock %}

templates/login.html

{% extends "base.html" %}

{% block content %}
    <h2>Login</h2>
    <form method="POST" action="{{ url_for('login') }}">
        <div>
            <label for="username">Username:</label>
            <input type="text" id="username" name="username" required>
        </div>
        <div>
            <label for="password">Password:</label>
            <input type="password" id="password" name="password" required>
        </div>
        <div>
            <input type="submit" value="Login">
        </div>
    </form>
{% endblock %}

templates/dashboard.html

{% extends "base.html" %}

{% block content %}
    <h2>Welcome to Your Dashboard!</h2>
    <p>This is a protected page, only accessible to logged-in users.</p>
    <p>Hello, {{ current_user.username }}!</p>
{% endblock %}

4. Registration Functionality

Now, let’s add the /register route to app.py.

@app.route('/register', methods=['GET', 'POST'])
def register():
    global user_id_counter # We need to modify this global variable
    if current_user.is_authenticated:
        return redirect(url_for('dashboard')) # If already logged in, go to dashboard

    if request.method == 'POST':
        username = request.form['username']
        password = request.form['password']

        # Check if username already exists
        for user_id, user_obj in users.items():
            if user_obj.username == username:
                flash('Username already taken. Please choose a different one.', 'error')
                return redirect(url_for('register'))

        # Hash the password for security
        hashed_password = generate_password_hash(password, method='pbkdf2:sha256')

        # Create a new user and "save" to our mock database
        user_id_counter += 1
        new_user = User(user_id_counter, username, hashed_password)
        users[user_id_counter] = new_user

        flash('Registration successful! Please log in.', 'success')
        return redirect(url_for('login'))

    return render_template('register.html')

Explanation:

• request.method == 'POST': This checks if the form has been submitted.
• request.form['username'], request.form['password']: These retrieve data from the submitted form.
• generate_password_hash(password, method='pbkdf2:sha256'): This function from werkzeug.security securely hashes the password. pbkdf2:sha256 is a strong, recommended hashing algorithm.
• flash(): This is a Flask function to show temporary messages to the user (e.g., “Registration successful!”). These messages are displayed in our base.html template.
• redirect(url_for('login')): After successful registration, the user is redirected to the login page.

5. Login Functionality

Next, add the /login route to app.py.

@app.route('/login', methods=['GET', 'POST'])
def login():
    if current_user.is_authenticated:
        return redirect(url_for('dashboard')) # If already logged in, go to dashboard

    if request.method == 'POST':
        username = request.form['username']
        password = request.form['password']

        user = None
        for user_id, user_obj in users.items():
            if user_obj.username == username:
                user = user_obj
                break

        if user and check_password_hash(user.password_hash, password):
            # If username exists and password is correct, log the user in
            login_user(user) # This function from Flask-Login manages the session
            flash('Logged in successfully!', 'success')

            # Redirect to the page they were trying to access, or dashboard by default
            next_page = request.args.get('next')
            return redirect(next_page or url_for('dashboard'))
        else:
            flash('Login Unsuccessful. Please check username and password.', 'error')

    return render_template('login.html')

Explanation:

• check_password_hash(user.password_hash, password): This verifies if the entered password matches the stored hashed password. It’s crucial to use this function rather than hashing the entered password and comparing hashes yourself, as check_password_hash handles the salting and iteration count correctly.
• login_user(user): This is the core Flask-Login function that logs the user into the session. It sets up the session cookie.
• request.args.get('next'): Flask-Login often redirects users to the login page with a ?next=/protected_page parameter if they tried to access a protected page while logged out. This line helps redirect them back to their intended destination after successful login.

6. Protected Routes (@login_required)

Now, let’s create a dashboard page that only logged-in users can access.

@app.route('/dashboard')
@login_required # This decorator ensures only authenticated users can access this route
def dashboard():
    # current_user is available thanks to Flask-Login and refers to the currently logged-in user object
    return render_template('dashboard.html')

Explanation:

• @login_required: This decorator from flask_login is a powerful tool. It automatically checks if current_user.is_authenticated is True. If not, it redirects the user to the login_view we defined earlier (/login) and adds the ?next= parameter.

7. Logout Functionality

Finally, provide a way for users to log out.

@app.route('/logout')
@login_required # Only a logged-in user can log out
def logout():
    logout_user() # This function from Flask-Login clears the user session
    flash('You have been logged out.', 'success')
    return redirect(url_for('index'))

Explanation:

• logout_user(): This Flask-Login function removes the user from the session, effectively logging them out.

Running Your Application

Save app.py and the templates folder. Open your terminal, navigate to the flask_auth_app directory, and run:

python app.py

Then, open your web browser and go to http://127.0.0.1:5000/.

• Try to go to /dashboard directly – you’ll be redirected to login.
• Register a new user.
• Log in with your new user.
• Access the dashboard.
• Log out.

Conclusion

Congratulations! You’ve successfully built a basic but functional authentication system for your Flask application using Flask-Login and werkzeug.security. You’ve learned about:

• The importance of password hashing for security.
• How Flask-Login manages user sessions and provides helpful utilities like @login_required and current_user.
• The fundamental flow of registration, login, and logout.

Remember, while our “database” was a simple dictionary for this guide, a real-world application would integrate with a proper database like PostgreSQL, MySQL, or SQLite, often using an ORM like SQLAlchemy for robust data management. This foundation, however, equips you with the core knowledge to secure your Flask applications!

Hello there, aspiring web developers and coding enthusiasts! Have you ever wanted to create your own corner on the internet, a simple blog where you can share your thoughts, ideas, or even your coding journey? You’re in luck! Today, we’re going to build a basic blog using two fantastic tools: Flask for our web application and Markdown for writing our blog posts.

This guide is designed for beginners, so don’t worry if some terms sound new. We’ll break down everything into easy-to-understand steps. By the end, you’ll have a functional, albeit simple, blog that you can expand upon!

Why Flask and Markdown?

Before we dive into the code, let’s quickly understand why these tools are a great choice for a basic blog:

• Flask: This is what we call a “micro web framework” for Python.
  • What is a web framework? Imagine you’re building a house. Instead of crafting every single brick and nail from scratch, you’d use pre-made tools, blueprints, and processes. A web framework is similar: it provides a structure and common tools to help you build web applications faster and more efficiently, handling things like requests from your browser, routing URLs, and generating web pages.
  • Why “micro”? Flask is considered “micro” because it doesn’t make many decisions for you. It provides the essentials and lets you choose how to add other components, making it lightweight and flexible – perfect for learning and building small projects like our blog.
• Markdown: This is a “lightweight markup language.”
  • What is a markup language? It’s a system for annotating a document in a way that is syntactically distinguishable from the text itself. Think of it like adding special instructions (marks) to your text that tell a program how to display it (e.g., make this bold, make this a heading).
  • Why “lightweight”? Markdown is incredibly simple to write and read. Instead of complex HTML tags (like <b> for bold or <h1> for a heading), you use intuitive symbols (like **text** for bold or # Heading for a heading). It allows you to write your blog posts in plain text files, which are easy to manage and version control.

Getting Started: Setting Up Your Environment

Before we write any Python code, we need to set up our development environment.

1. Install Python

If you don’t have Python installed, head over to the official Python website and download the latest stable version. Make sure to check the box that says “Add Python to PATH” during installation.

2. Create a Virtual Environment

A virtual environment is a self-contained directory that holds a specific version of Python and any libraries (packages) you install for a particular project. It’s like having a separate toolbox for each project, preventing conflicts between different project’s dependencies.

Let’s create one:

1. Open your terminal or command prompt.
2. Navigate to the directory where you want to create your blog project. For example:
   bash
mkdir my-flask-blog
cd my-flask-blog
3. Create the virtual environment:
   bash
python -m venv venv
   This creates a folder named venv (you can name it anything, but venv is common).

3. Activate the Virtual Environment

Now, we need to “enter” our isolated environment:

• On Windows:
  bash
.\venv\Scripts\activate
• On macOS/Linux:
  bash
source venv/bin/activate
  You’ll notice (venv) appearing at the beginning of your terminal prompt, indicating that the virtual environment is active.

4. Install Flask and Python-Markdown

With our virtual environment active, let’s install the necessary Python packages using pip.
* What is pip? pip is the standard package installer for Python. It allows you to easily install and manage additional libraries that aren’t part of the Python standard library.

pip install Flask markdown

This command installs both the Flask web framework and the markdown library, which we’ll use to convert our Markdown blog posts into HTML.

Our Blog’s Structure

To keep things organized, let’s define a simple folder structure for our blog:

my-flask-blog/
├── venv/                   # Our virtual environment
├── posts/                  # Where our Markdown blog posts will live
│   ├── first-post.md
│   └── another-great-read.md
├── templates/              # Our HTML templates
│   ├── index.html
│   └── post.html
└── app.py                  # Our Flask application code

Create the posts and templates folders inside your my-flask-blog directory.

Building the Flask Application (app.py)

Now, let’s write the core of our application in app.py.

1. Basic Flask Application

Create a file named app.py in your my-flask-blog directory and add the following code:

from flask import Flask, render_template, abort
import os
import markdown

app = Flask(__name__)

@app.route('/')
def index():
    # In a real blog, you'd list all your posts here.
    # For now, let's just say "Welcome!"
    return "<h1>Welcome to My Flask Blog!</h1><p>Check back soon for posts!</p>"

if __name__ == '__main__':
    app.run(debug=True)

Explanation:
* from flask import Flask, render_template, abort: We import necessary components from the Flask library.
* Flask: The main class for our web application.
* render_template: A function to render HTML files (templates).
* abort: A function to stop a request early with an error code (like a “404 Not Found”).
* import os: This module provides a way of using operating system-dependent functionality, like listing files in a directory.
* import markdown: This is the library we installed to convert Markdown to HTML.
* app = Flask(__name__): This creates an instance of our Flask application. __name__ helps Flask locate resources.
* @app.route('/'): This is a “decorator” that tells Flask which URL should trigger the index() function. In this case, / means the root URL (e.g., http://127.0.0.1:5000/).
* app.run(debug=True): This starts the Flask development server. debug=True means that if you make changes to your code, the server will automatically restart, and it will also provide helpful error messages in your browser. Remember to set debug=False for production applications!

Run Your First Flask App

1. Save app.py.
2. Go back to your terminal (with the virtual environment active) and run:
   bash
python app.py
3. You should see output similar to:
   “`
   • Serving Flask app ‘app’
   • Debug mode: on
     WARNING: This is a development server. Do not use it in a production deployment.
     Use a production WSGI server instead.
   • Running on http://127.0.0.1:5000
     Press CTRL+C to quit
     “`
4. Open your web browser and go to http://127.0.0.1:5000. You should see “Welcome to My Flask Blog!”

Great! Our Flask app is up and running. Now, let’s make it display actual blog posts written in Markdown.

Creating Blog Posts

Inside your posts/ directory, create a new file named my-first-post.md (the .md extension is important for Markdown files):

Welcome to my very first blog post on my new Flask-powered blog!

This post is written entirely in **Markdown**, which makes it super easy to format.

## What is Markdown good for?
*   Writing blog posts
*   README files for projects
*   Documentation

It's simple, readable, and converts easily to HTML.

Enjoy exploring!

You can create more .md files in the posts/ directory, each representing a blog post.

Displaying Individual Blog Posts

Now, let’s modify app.py to read and display our Markdown files.

from flask import Flask, render_template, abort
import os
import markdown

app = Flask(__name__)
POSTS_DIR = 'posts' # Define the directory where blog posts are stored

def get_post_slugs():
    posts = []
    for filename in os.listdir(POSTS_DIR):
        if filename.endswith('.md'):
            slug = os.path.splitext(filename)[0] # Get filename without .md
            posts.append(slug)
    return posts

def read_markdown_post(slug):
    filepath = os.path.join(POSTS_DIR, f'{slug}.md')
    if not os.path.exists(filepath):
        return None, None # Post not found

    with open(filepath, 'r', encoding='utf-8') as f:
        content = f.read()

    # Optional: Extract title from the first heading in Markdown
    lines = content.split('\n')
    title = "Untitled Post"
    if lines and lines[0].startswith('# '):
        title = lines[0][2:].strip() # Remove '# ' and any leading/trailing whitespace

    html_content = markdown.markdown(content) # Convert Markdown to HTML
    return title, html_content

@app.route('/')
def index():
    post_slugs = get_post_slugs()
    # In a real app, you might want to read titles for the list too.
    return render_template('index.html', post_slugs=post_slugs)

@app.route('/posts/<slug>')
def post(slug):
    title, content = read_markdown_post(slug)
    if content is None:
        abort(404) # Show a 404 Not Found error if post doesn't exist

    return render_template('post.html', title=title, content=content)

if __name__ == '__main__':
    app.run(debug=True)

New Additions Explained:
* POSTS_DIR = 'posts': A constant to easily reference our posts directory.
* get_post_slugs(): This function iterates through our posts/ directory, finds all .md files, and returns their names (without the .md extension). These names are often called “slugs” in web development, as they are part of the URL.
* read_markdown_post(slug): This function takes a slug (e.g., my-first-post), constructs the full file path, reads the content, and then uses markdown.markdown() to convert it into HTML. It also tries to extract a title from the first H1 heading.
* @app.route('/posts/<slug>'): This is a dynamic route. The <slug> part is a variable that Flask captures from the URL. So, if someone visits /posts/my-first-post, Flask will call the post() function with slug='my-first-post'.
* abort(404): If read_markdown_post returns None (meaning the file wasn’t found), we use abort(404) to tell the browser that the page doesn’t exist.
* render_template('post.html', title=title, content=content): Instead of returning raw HTML, we’re now telling Flask to use an HTML template file (post.html) and pass it variables (title and content) that it can display.

Creating HTML Templates

Now we need to create the HTML files that render_template will use. Flask looks for templates in a folder named templates/ by default.

templates/index.html (List of Posts)

This file will display a list of all available blog posts.

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>My Flask Blog</title>
    <style>
        body { font-family: sans-serif; margin: 20px; line-height: 1.6; }
        h1 { color: #333; }
        ul { list-style: none; padding: 0; }
        li { margin-bottom: 10px; }
        a { text-decoration: none; color: #007bff; }
        a:hover { text-decoration: underline; }
    </style>
</head>
<body>
    <h1>Welcome to My Flask Blog!</h1>
    <h2>Recent Posts:</h2>
    {% if post_slugs %}
    <ul>
        {% for slug in post_slugs %}
        <li><a href="/posts/{{ slug }}">{{ slug.replace('-', ' ').title() }}</a></li>
        {% endfor %}
    </ul>
    {% else %}
    <p>No posts yet. Check back soon!</p>
    {% endif %}
</body>
</html>

Explanation of Jinja2 (Templating Language):
* {% if post_slugs %} and {% for slug in post_slugs %}: These are control structures provided by Jinja2, the templating engine Flask uses. They allow us to write logic within our HTML, like checking if a list is empty or looping through items.
* {{ slug }}: This is how you display a variable’s value in Jinja2. Here, slug.replace('-', ' ').title() is a simple way to make the slug look nicer for display (e.g., my-first-post becomes “My First Post”).

templates/post.html (Individual Post View)

This file will display the content of a single blog post.

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>{{ title }} - My Flask Blog</title>
    <style>
        body { font-family: sans-serif; margin: 20px; line-height: 1.6; }
        h1 { color: #333; }
        a { text-decoration: none; color: #007bff; }
        a:hover { text-decoration: underline; }
        .post-content img { max-width: 100%; height: auto; } /* Basic responsive image styling */
    </style>
</head>
<body>
    <nav><a href="/">← Back to Home</a></nav>
    <article class="post-content">
        <h1>{{ title }}</h1>
        {{ content | safe }} {# The 'safe' filter is important here! #}
    </article>
</body>
</html>

Explanation:
* {{ title }}: Displays the title of the post.
* {{ content | safe }}: This displays the HTML content that was generated from Markdown. The | safe filter is crucial here! By default, Jinja2 escapes HTML (converts < to <, > to >) to prevent security vulnerabilities like XSS. However, since we want to display the actual HTML generated from our trusted Markdown, we tell Jinja2 that this content is “safe” to render as raw HTML.

Running Your Complete Blog

1. Make sure you have app.py, the posts/ folder with my-first-post.md, and the templates/ folder with index.html and post.html all in their correct places within my-flask-blog/.
2. Ensure your virtual environment is active.
3. Stop your previous Flask app (if it’s still running) by pressing CTRL+C in the terminal.
4. Run the updated app:
   bash
python app.py
5. Open your browser and visit http://127.0.0.1:5000. You should now see a list of your blog posts.
6. Click on “My First Post” (or whatever you named your Markdown file) to see the individual post page!

Congratulations! You’ve just built a basic blog using Flask and Markdown!

Next Steps and Further Improvements

This is just the beginning. Here are some ideas to expand your blog:

• Styling (CSS): Make your blog look prettier by adding more comprehensive CSS to your templates/ (or create a static/ folder for static files like CSS and images).
• Metadata: Add more information to your Markdown posts (like author, date, tags) by using “front matter” (a block of YAML at the top of the Markdown file) and parse it in app.py.
• Pagination: If you have many posts, implement pagination to show only a few posts per page.
• Search Functionality: Allow users to search your posts.
• Comments: Integrate a third-party commenting system like Disqus.
• Database: For more complex features (user accounts, true content management), you’d typically integrate a database like SQLite (with Flask-SQLAlchemy).
• Deployment: Learn how to deploy your Flask app to a real web server so others can see it!

Building this basic blog is an excellent stepping stone into web development. You’ve touched upon routing, templating, handling files, and using external libraries – all fundamental concepts in modern web applications. Keep experimenting and building!