pypi / flask-appbuilder
flask-appbuilder
What changed in flask-appbuilder 5, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-25.
1 breaking2 security1 new APIs and options2 behavior and defaults2 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initflask-appbuilder 58 changes
Breaking changes 1
API login provider validation is enforced when AUTH_TYPE has no API provider.
Security 2
Users created without a password are assigned an unusable password.
Special characters in usernames are escaped when used in LDAP search filters.
New APIs and options 1
Adds dynamic group/role mapping for LDAP, OAuth and SAML.
Behavior and default changes 2
A warning is issued when Azure OAuth JWT signature verification is disabled.
UUID generation switches from uuid1 to uuid4 for better randomness.
Fixes and other changes 2
Authentication and authorization redirects are now distinguished.
The OAuth email whitelist regex is anchored to the end of the string.