title: Making Flask API more secure
body: <p>I'm using Flask-HTTPAuth (<a href="https://github.com/miguelgrinberg/Flask-HTTPAuth" rel="nofollow">https://github.com/miguelgrinberg/Flask-HTTPAuth</a>) to protect my API with a username and a password. Since this is running on port 8080, I've opened the port on my VM and made it public. Is there anything else I can do to make the API more secure?</p>
  
  <p>Btw I'm using Tornado in front of Flask to act as a scalable server. And I'm the only one consuming the API because of which having a single username-password pair is a viable option for me.</p>
  
  <p>Thanks.</p>
  
  <p>Edit - Is there anything I can do on Windows Firewall to make port 8080 more secure?</p>