An application with Flask-Security makes a request to the database for the authenticated user for each route, but sometimes it’s not necessary. Here is a way how to disable it with a decorator and custom UserDatastore.
Finally it happened. The previous version 1.7.5 was released in December 2015. It’s not a big library but the useful one. There is a flask-security-fork, but it’s better to have a one official place for all issues and pull requests. Now it’s merged. Thanks to Jiri Kuncar for all the efforts.
The full list of changes is here.