Added SESSION_REFRESH_EACH_REQUEST config option.
This also changes how sessions are being refreshed. With the new behavior set-cookie is only emitted if the session is modified or if the session is permanent. Permanent sessions can be set to not refresh automatically through the SESSION_REFRESH_EACH_REQUEST config key. This fixes #798.
This commit is contained in:
parent
1a66a7e110
commit
d1d835c023
5 changed files with 96 additions and 0 deletions
|
|
@ -285,6 +285,7 @@ class Flask(_PackageBoundObject):
|
|||
'SESSION_COOKIE_PATH': None,
|
||||
'SESSION_COOKIE_HTTPONLY': True,
|
||||
'SESSION_COOKIE_SECURE': False,
|
||||
'SESSION_REFRESH_EACH_REQUEST': True,
|
||||
'MAX_CONTENT_LENGTH': None,
|
||||
'SEND_FILE_MAX_AGE_DEFAULT': 12 * 60 * 60, # 12 hours
|
||||
'TRAP_BAD_REQUEST_ERRORS': False,
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue