- Regenerating the session id every time the session is not found on the server side.
- Added regenerate_sid to ServerSideSessionInterface to allow regenerating the session id if needed.
- Ported old fix to avoid storing session if the session has not changed.
Unreleased
- Use
should_set_cookie
for preventing each request from saving the session again. - Permanent session otherwise empty will not be saved.
- Use secrets module to generate session identifiers, with 256 bits of entropy (was previously 122).
- Explicitly name support for python-memcached, pylibmc and pymemcache.
- Introduce SESSION_KEY_LENGTH to control the length of the session key in bytes, default is 32.
- Fix pymongo 4.0 compatibility.
- Fix expiry is None bug in SQLAlchemy.
- Fix bug when existing SQLAlchemy db instance.
- Support SQLAlchemy SESSION_SQLALCHEMY_SEQUENCE, SESSION_SQLALCHEMY_SCHEMA and SESSION_SQLALCHEMY_BINDKEY
- Drop support for Redis < 2.6.12.
- Fix empty sessions being saved.
- Support Flask 3.0 and Werkzeug 3.0
Released 2023-05-11
- Drop support for Python < 3.7.
- Switch to
pyproject.toml
and Flit for packaging. - Move to Pallets Community Ecosystem for community-driven maintenance.
- Replace use of
session_cookie_name
for Flask 2.3 compatibility.
- Temporarily pin Flask < 2.3.
- Added support for
SESSION_COOKIE_SAMESITE
.
- Changed
werkzeug.contrib.cache
tocachelib
.
SqlAlchemySessionInterface
is usingVARCHAR(255)
to store session id now.SqlAlchemySessionInterface
won't run db.create_all anymore.
SqlAlchemySessionInterface
is usingLargeBinary
type to store data now.- Fixed
MongoDBSessionInterface
delete
method not found. - Fixed
TypeError
when gettingstore_id
using a signer.
- Fixed signing failure in Python 3.
- Fixed
MongoDBSessionInterface
failure in Python 3. - Fixed
SqlAlchemySessionInterface
failure in Python 3. - Fixed
StrictRedis
support.
- Added support for non-permanent session.
- Fixed signing failure.
- Added
SqlAlchemySessionInterface
. - Added support for cookie session id signing.
- Various bugfixes.
Fixed MongoDB backend InvalidDocument
error.
- First public preview release.