Better session logic.

This commit is contained in:
Armin Ronacher 2011-07-08 19:20:40 +02:00
parent deb513c7fe
commit 585bf02ee0

View file

@ -169,9 +169,10 @@ class SecureCookieSessionInterface(SessionInterface):
def save_session(self, app, session, response):
expires = self.get_expiration_time(app, session)
domain = self.get_cookie_domain(app)
if session.modified and not session:
response.delete_cookie(app.session_cookie_name,
domain=domain)
else:
session.save_cookie(response, app.session_cookie_name,
expires=expires, httponly=True, domain=domain)
if not session:
if session.modified:
response.delete_cookie(app.session_cookie_name,
domain=domain)
return
session.save_cookie(response, app.session_cookie_name,
expires=expires, httponly=True, domain=domain)