| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450 |
- <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
- "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
- <html xmlns="http://www.w3.org/1999/xhtml" lang="en">
- <head>
- <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
-
- <title>flask.sessions — proxypool documentation</title>
-
- <link rel="stylesheet" href="../../_static/alabaster.css" type="text/css" />
- <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
-
- <script type="text/javascript">
- var DOCUMENTATION_OPTIONS = {
- URL_ROOT: '../../',
- VERSION: '',
- COLLAPSE_INDEX: false,
- FILE_SUFFIX: '.html',
- HAS_SOURCE: true
- };
- </script>
- <script type="text/javascript" src="../../_static/jquery.js"></script>
- <script type="text/javascript" src="../../_static/underscore.js"></script>
- <script type="text/javascript" src="../../_static/doctools.js"></script>
- <link rel="index" title="Index" href="../../genindex.html" />
- <link rel="search" title="Search" href="../../search.html" />
- <link rel="top" title="proxypool documentation" href="../../index.html" />
- <link rel="up" title="Module code" href="../index.html" />
-
- <link rel="stylesheet" href="../../_static/custom.css" type="text/css" />
-
-
- <meta name="viewport" content="width=device-width, initial-scale=0.9, maximum-scale=0.9" />
- </head>
- <body role="document">
-
- <div class="document">
- <div class="documentwrapper">
- <div class="bodywrapper">
- <div class="body" role="main">
-
- <h1>Source code for flask.sessions</h1><div class="highlight"><pre>
- <span></span><span class="c1"># -*- coding: utf-8 -*-</span>
- <span class="sd">"""</span>
- <span class="sd"> flask.sessions</span>
- <span class="sd"> ~~~~~~~~~~~~~~</span>
- <span class="sd"> Implements cookie based sessions based on itsdangerous.</span>
- <span class="sd"> :copyright: (c) 2015 by Armin Ronacher.</span>
- <span class="sd"> :license: BSD, see LICENSE for more details.</span>
- <span class="sd">"""</span>
- <span class="kn">import</span> <span class="nn">uuid</span>
- <span class="kn">import</span> <span class="nn">hashlib</span>
- <span class="kn">from</span> <span class="nn">base64</span> <span class="k">import</span> <span class="n">b64encode</span><span class="p">,</span> <span class="n">b64decode</span>
- <span class="kn">from</span> <span class="nn">datetime</span> <span class="k">import</span> <span class="n">datetime</span>
- <span class="kn">from</span> <span class="nn">werkzeug.http</span> <span class="k">import</span> <span class="n">http_date</span><span class="p">,</span> <span class="n">parse_date</span>
- <span class="kn">from</span> <span class="nn">werkzeug.datastructures</span> <span class="k">import</span> <span class="n">CallbackDict</span>
- <span class="kn">from</span> <span class="nn">.</span> <span class="k">import</span> <span class="n">Markup</span><span class="p">,</span> <span class="n">json</span>
- <span class="kn">from</span> <span class="nn">._compat</span> <span class="k">import</span> <span class="n">iteritems</span><span class="p">,</span> <span class="n">text_type</span>
- <span class="kn">from</span> <span class="nn">.helpers</span> <span class="k">import</span> <span class="n">total_seconds</span>
- <span class="kn">from</span> <span class="nn">itsdangerous</span> <span class="k">import</span> <span class="n">URLSafeTimedSerializer</span><span class="p">,</span> <span class="n">BadSignature</span>
- <div class="viewcode-block" id="SessionMixin"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionMixin">[docs]</a><span class="k">class</span> <span class="nc">SessionMixin</span><span class="p">(</span><span class="nb">object</span><span class="p">):</span>
- <span class="sd">"""Expands a basic dictionary with an accessors that are expected</span>
- <span class="sd"> by Flask extensions and users for the session.</span>
- <span class="sd"> """</span>
- <span class="k">def</span> <span class="nf">_get_permanent</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
- <span class="k">return</span> <span class="bp">self</span><span class="o">.</span><span class="n">get</span><span class="p">(</span><span class="s1">'_permanent'</span><span class="p">,</span> <span class="kc">False</span><span class="p">)</span>
- <span class="k">def</span> <span class="nf">_set_permanent</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">value</span><span class="p">):</span>
- <span class="bp">self</span><span class="p">[</span><span class="s1">'_permanent'</span><span class="p">]</span> <span class="o">=</span> <span class="nb">bool</span><span class="p">(</span><span class="n">value</span><span class="p">)</span>
- <span class="c1">#: this reflects the ``'_permanent'`` key in the dict.</span>
- <span class="n">permanent</span> <span class="o">=</span> <span class="nb">property</span><span class="p">(</span><span class="n">_get_permanent</span><span class="p">,</span> <span class="n">_set_permanent</span><span class="p">)</span>
- <span class="k">del</span> <span class="n">_get_permanent</span><span class="p">,</span> <span class="n">_set_permanent</span>
- <span class="c1">#: some session backends can tell you if a session is new, but that is</span>
- <span class="c1">#: not necessarily guaranteed. Use with caution. The default mixin</span>
- <span class="c1">#: implementation just hardcodes ``False`` in.</span>
- <span class="n">new</span> <span class="o">=</span> <span class="kc">False</span>
- <span class="c1">#: for some backends this will always be ``True``, but some backends will</span>
- <span class="c1">#: default this to false and detect changes in the dictionary for as</span>
- <span class="c1">#: long as changes do not happen on mutable structures in the session.</span>
- <span class="c1">#: The default mixin implementation just hardcodes ``True`` in.</span>
- <span class="n">modified</span> <span class="o">=</span> <span class="kc">True</span></div>
- <span class="k">def</span> <span class="nf">_tag</span><span class="p">(</span><span class="n">value</span><span class="p">):</span>
- <span class="k">if</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="nb">tuple</span><span class="p">):</span>
- <span class="k">return</span> <span class="p">{</span><span class="s1">' t'</span><span class="p">:</span> <span class="p">[</span><span class="n">_tag</span><span class="p">(</span><span class="n">x</span><span class="p">)</span> <span class="k">for</span> <span class="n">x</span> <span class="ow">in</span> <span class="n">value</span><span class="p">]}</span>
- <span class="k">elif</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="n">uuid</span><span class="o">.</span><span class="n">UUID</span><span class="p">):</span>
- <span class="k">return</span> <span class="p">{</span><span class="s1">' u'</span><span class="p">:</span> <span class="n">value</span><span class="o">.</span><span class="n">hex</span><span class="p">}</span>
- <span class="k">elif</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="nb">bytes</span><span class="p">):</span>
- <span class="k">return</span> <span class="p">{</span><span class="s1">' b'</span><span class="p">:</span> <span class="n">b64encode</span><span class="p">(</span><span class="n">value</span><span class="p">)</span><span class="o">.</span><span class="n">decode</span><span class="p">(</span><span class="s1">'ascii'</span><span class="p">)}</span>
- <span class="k">elif</span> <span class="n">callable</span><span class="p">(</span><span class="nb">getattr</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="s1">'__html__'</span><span class="p">,</span> <span class="kc">None</span><span class="p">)):</span>
- <span class="k">return</span> <span class="p">{</span><span class="s1">' m'</span><span class="p">:</span> <span class="n">text_type</span><span class="p">(</span><span class="n">value</span><span class="o">.</span><span class="n">__html__</span><span class="p">())}</span>
- <span class="k">elif</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="nb">list</span><span class="p">):</span>
- <span class="k">return</span> <span class="p">[</span><span class="n">_tag</span><span class="p">(</span><span class="n">x</span><span class="p">)</span> <span class="k">for</span> <span class="n">x</span> <span class="ow">in</span> <span class="n">value</span><span class="p">]</span>
- <span class="k">elif</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="n">datetime</span><span class="p">):</span>
- <span class="k">return</span> <span class="p">{</span><span class="s1">' d'</span><span class="p">:</span> <span class="n">http_date</span><span class="p">(</span><span class="n">value</span><span class="p">)}</span>
- <span class="k">elif</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="nb">dict</span><span class="p">):</span>
- <span class="k">return</span> <span class="nb">dict</span><span class="p">((</span><span class="n">k</span><span class="p">,</span> <span class="n">_tag</span><span class="p">(</span><span class="n">v</span><span class="p">))</span> <span class="k">for</span> <span class="n">k</span><span class="p">,</span> <span class="n">v</span> <span class="ow">in</span> <span class="n">iteritems</span><span class="p">(</span><span class="n">value</span><span class="p">))</span>
- <span class="k">elif</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="nb">str</span><span class="p">):</span>
- <span class="k">try</span><span class="p">:</span>
- <span class="k">return</span> <span class="n">text_type</span><span class="p">(</span><span class="n">value</span><span class="p">)</span>
- <span class="k">except</span> <span class="ne">UnicodeError</span><span class="p">:</span>
- <span class="kn">from</span> <span class="nn">flask.debughelpers</span> <span class="k">import</span> <span class="n">UnexpectedUnicodeError</span>
- <span class="k">raise</span> <span class="n">UnexpectedUnicodeError</span><span class="p">(</span><span class="s1">u'A byte string with '</span>
- <span class="s1">u'non-ASCII data was passed to the session system '</span>
- <span class="s1">u'which can only store unicode strings. Consider '</span>
- <span class="s1">u'base64 encoding your string (String was </span><span class="si">%r</span><span class="s1">)'</span> <span class="o">%</span> <span class="n">value</span><span class="p">)</span>
- <span class="k">return</span> <span class="n">value</span>
- <div class="viewcode-block" id="TaggedJSONSerializer"><a class="viewcode-back" href="../../flask/flask.html#flask.app.TaggedJSONSerializer">[docs]</a><span class="k">class</span> <span class="nc">TaggedJSONSerializer</span><span class="p">(</span><span class="nb">object</span><span class="p">):</span>
- <span class="sd">"""A customized JSON serializer that supports a few extra types that</span>
- <span class="sd"> we take for granted when serializing (tuples, markup objects, datetime).</span>
- <span class="sd"> """</span>
- <div class="viewcode-block" id="TaggedJSONSerializer.dumps"><a class="viewcode-back" href="../../flask/flask.html#flask.app.TaggedJSONSerializer.dumps">[docs]</a> <span class="k">def</span> <span class="nf">dumps</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">value</span><span class="p">):</span>
- <span class="k">return</span> <span class="n">json</span><span class="o">.</span><span class="n">dumps</span><span class="p">(</span><span class="n">_tag</span><span class="p">(</span><span class="n">value</span><span class="p">),</span> <span class="n">separators</span><span class="o">=</span><span class="p">(</span><span class="s1">','</span><span class="p">,</span> <span class="s1">':'</span><span class="p">))</span></div>
- <div class="viewcode-block" id="TaggedJSONSerializer.loads"><a class="viewcode-back" href="../../flask/flask.html#flask.app.TaggedJSONSerializer.loads">[docs]</a> <span class="k">def</span> <span class="nf">loads</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">value</span><span class="p">):</span>
- <span class="k">def</span> <span class="nf">object_hook</span><span class="p">(</span><span class="n">obj</span><span class="p">):</span>
- <span class="k">if</span> <span class="nb">len</span><span class="p">(</span><span class="n">obj</span><span class="p">)</span> <span class="o">!=</span> <span class="mi">1</span><span class="p">:</span>
- <span class="k">return</span> <span class="n">obj</span>
- <span class="n">the_key</span><span class="p">,</span> <span class="n">the_value</span> <span class="o">=</span> <span class="nb">next</span><span class="p">(</span><span class="n">iteritems</span><span class="p">(</span><span class="n">obj</span><span class="p">))</span>
- <span class="k">if</span> <span class="n">the_key</span> <span class="o">==</span> <span class="s1">' t'</span><span class="p">:</span>
- <span class="k">return</span> <span class="nb">tuple</span><span class="p">(</span><span class="n">the_value</span><span class="p">)</span>
- <span class="k">elif</span> <span class="n">the_key</span> <span class="o">==</span> <span class="s1">' u'</span><span class="p">:</span>
- <span class="k">return</span> <span class="n">uuid</span><span class="o">.</span><span class="n">UUID</span><span class="p">(</span><span class="n">the_value</span><span class="p">)</span>
- <span class="k">elif</span> <span class="n">the_key</span> <span class="o">==</span> <span class="s1">' b'</span><span class="p">:</span>
- <span class="k">return</span> <span class="n">b64decode</span><span class="p">(</span><span class="n">the_value</span><span class="p">)</span>
- <span class="k">elif</span> <span class="n">the_key</span> <span class="o">==</span> <span class="s1">' m'</span><span class="p">:</span>
- <span class="k">return</span> <span class="n">Markup</span><span class="p">(</span><span class="n">the_value</span><span class="p">)</span>
- <span class="k">elif</span> <span class="n">the_key</span> <span class="o">==</span> <span class="s1">' d'</span><span class="p">:</span>
- <span class="k">return</span> <span class="n">parse_date</span><span class="p">(</span><span class="n">the_value</span><span class="p">)</span>
- <span class="k">return</span> <span class="n">obj</span>
- <span class="k">return</span> <span class="n">json</span><span class="o">.</span><span class="n">loads</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="n">object_hook</span><span class="o">=</span><span class="n">object_hook</span><span class="p">)</span></div></div>
- <span class="n">session_json_serializer</span> <span class="o">=</span> <span class="n">TaggedJSONSerializer</span><span class="p">()</span>
- <div class="viewcode-block" id="SecureCookieSession"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SecureCookieSession">[docs]</a><span class="k">class</span> <span class="nc">SecureCookieSession</span><span class="p">(</span><span class="n">CallbackDict</span><span class="p">,</span> <span class="n">SessionMixin</span><span class="p">):</span>
- <span class="sd">"""Base class for sessions based on signed cookies."""</span>
- <span class="k">def</span> <span class="nf">__init__</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">initial</span><span class="o">=</span><span class="kc">None</span><span class="p">):</span>
- <span class="k">def</span> <span class="nf">on_update</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
- <span class="bp">self</span><span class="o">.</span><span class="n">modified</span> <span class="o">=</span> <span class="kc">True</span>
- <span class="n">CallbackDict</span><span class="o">.</span><span class="n">__init__</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">initial</span><span class="p">,</span> <span class="n">on_update</span><span class="p">)</span>
- <span class="bp">self</span><span class="o">.</span><span class="n">modified</span> <span class="o">=</span> <span class="kc">False</span></div>
- <div class="viewcode-block" id="NullSession"><a class="viewcode-back" href="../../flask/flask.html#flask.app.NullSession">[docs]</a><span class="k">class</span> <span class="nc">NullSession</span><span class="p">(</span><span class="n">SecureCookieSession</span><span class="p">):</span>
- <span class="sd">"""Class used to generate nicer error messages if sessions are not</span>
- <span class="sd"> available. Will still allow read-only access to the empty session</span>
- <span class="sd"> but fail on setting.</span>
- <span class="sd"> """</span>
- <span class="k">def</span> <span class="nf">_fail</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="o">*</span><span class="n">args</span><span class="p">,</span> <span class="o">**</span><span class="n">kwargs</span><span class="p">):</span>
- <span class="k">raise</span> <span class="ne">RuntimeError</span><span class="p">(</span><span class="s1">'The session is unavailable because no secret '</span>
- <span class="s1">'key was set. Set the secret_key on the '</span>
- <span class="s1">'application to something unique and secret.'</span><span class="p">)</span>
- <span class="n">__setitem__</span> <span class="o">=</span> <span class="n">__delitem__</span> <span class="o">=</span> <span class="n">clear</span> <span class="o">=</span> <span class="n">pop</span> <span class="o">=</span> <span class="n">popitem</span> <span class="o">=</span> \
- <span class="n">update</span> <span class="o">=</span> <span class="n">setdefault</span> <span class="o">=</span> <span class="n">_fail</span>
- <span class="k">del</span> <span class="n">_fail</span></div>
- <div class="viewcode-block" id="SessionInterface"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface">[docs]</a><span class="k">class</span> <span class="nc">SessionInterface</span><span class="p">(</span><span class="nb">object</span><span class="p">):</span>
- <span class="sd">"""The basic interface you have to implement in order to replace the</span>
- <span class="sd"> default session interface which uses werkzeug's securecookie</span>
- <span class="sd"> implementation. The only methods you have to implement are</span>
- <span class="sd"> :meth:`open_session` and :meth:`save_session`, the others have</span>
- <span class="sd"> useful defaults which you don't need to change.</span>
- <span class="sd"> The session object returned by the :meth:`open_session` method has to</span>
- <span class="sd"> provide a dictionary like interface plus the properties and methods</span>
- <span class="sd"> from the :class:`SessionMixin`. We recommend just subclassing a dict</span>
- <span class="sd"> and adding that mixin::</span>
- <span class="sd"> class Session(dict, SessionMixin):</span>
- <span class="sd"> pass</span>
- <span class="sd"> If :meth:`open_session` returns ``None`` Flask will call into</span>
- <span class="sd"> :meth:`make_null_session` to create a session that acts as replacement</span>
- <span class="sd"> if the session support cannot work because some requirement is not</span>
- <span class="sd"> fulfilled. The default :class:`NullSession` class that is created</span>
- <span class="sd"> will complain that the secret key was not set.</span>
- <span class="sd"> To replace the session interface on an application all you have to do</span>
- <span class="sd"> is to assign :attr:`flask.Flask.session_interface`::</span>
- <span class="sd"> app = Flask(__name__)</span>
- <span class="sd"> app.session_interface = MySessionInterface()</span>
- <span class="sd"> .. versionadded:: 0.8</span>
- <span class="sd"> """</span>
- <span class="c1">#: :meth:`make_null_session` will look here for the class that should</span>
- <span class="c1">#: be created when a null session is requested. Likewise the</span>
- <span class="c1">#: :meth:`is_null_session` method will perform a typecheck against</span>
- <span class="c1">#: this type.</span>
- <span class="n">null_session_class</span> <span class="o">=</span> <span class="n">NullSession</span>
- <span class="c1">#: A flag that indicates if the session interface is pickle based.</span>
- <span class="c1">#: This can be used by flask extensions to make a decision in regards</span>
- <span class="c1">#: to how to deal with the session object.</span>
- <span class="c1">#:</span>
- <span class="c1">#: .. versionadded:: 0.10</span>
- <span class="n">pickle_based</span> <span class="o">=</span> <span class="kc">False</span>
- <div class="viewcode-block" id="SessionInterface.make_null_session"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.make_null_session">[docs]</a> <span class="k">def</span> <span class="nf">make_null_session</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">):</span>
- <span class="sd">"""Creates a null session which acts as a replacement object if the</span>
- <span class="sd"> real session support could not be loaded due to a configuration</span>
- <span class="sd"> error. This mainly aids the user experience because the job of the</span>
- <span class="sd"> null session is to still support lookup without complaining but</span>
- <span class="sd"> modifications are answered with a helpful error message of what</span>
- <span class="sd"> failed.</span>
- <span class="sd"> This creates an instance of :attr:`null_session_class` by default.</span>
- <span class="sd"> """</span>
- <span class="k">return</span> <span class="bp">self</span><span class="o">.</span><span class="n">null_session_class</span><span class="p">()</span></div>
- <div class="viewcode-block" id="SessionInterface.is_null_session"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.is_null_session">[docs]</a> <span class="k">def</span> <span class="nf">is_null_session</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">obj</span><span class="p">):</span>
- <span class="sd">"""Checks if a given object is a null session. Null sessions are</span>
- <span class="sd"> not asked to be saved.</span>
- <span class="sd"> This checks if the object is an instance of :attr:`null_session_class`</span>
- <span class="sd"> by default.</span>
- <span class="sd"> """</span>
- <span class="k">return</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">obj</span><span class="p">,</span> <span class="bp">self</span><span class="o">.</span><span class="n">null_session_class</span><span class="p">)</span></div>
- <div class="viewcode-block" id="SessionInterface.get_cookie_domain"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.get_cookie_domain">[docs]</a> <span class="k">def</span> <span class="nf">get_cookie_domain</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">):</span>
- <span class="sd">"""Helpful helper method that returns the cookie domain that should</span>
- <span class="sd"> be used for the session cookie if session cookies are used.</span>
- <span class="sd"> """</span>
- <span class="k">if</span> <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">'SESSION_COOKIE_DOMAIN'</span><span class="p">]</span> <span class="ow">is</span> <span class="ow">not</span> <span class="kc">None</span><span class="p">:</span>
- <span class="k">return</span> <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">'SESSION_COOKIE_DOMAIN'</span><span class="p">]</span>
- <span class="k">if</span> <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">'SERVER_NAME'</span><span class="p">]</span> <span class="ow">is</span> <span class="ow">not</span> <span class="kc">None</span><span class="p">:</span>
- <span class="c1"># chop off the port which is usually not supported by browsers</span>
- <span class="n">rv</span> <span class="o">=</span> <span class="s1">'.'</span> <span class="o">+</span> <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">'SERVER_NAME'</span><span class="p">]</span><span class="o">.</span><span class="n">rsplit</span><span class="p">(</span><span class="s1">':'</span><span class="p">,</span> <span class="mi">1</span><span class="p">)[</span><span class="mi">0</span><span class="p">]</span>
- <span class="c1"># Google chrome does not like cookies set to .localhost, so</span>
- <span class="c1"># we just go with no domain then. Flask documents anyways that</span>
- <span class="c1"># cross domain cookies need a fully qualified domain name</span>
- <span class="k">if</span> <span class="n">rv</span> <span class="o">==</span> <span class="s1">'.localhost'</span><span class="p">:</span>
- <span class="n">rv</span> <span class="o">=</span> <span class="kc">None</span>
- <span class="c1"># If we infer the cookie domain from the server name we need</span>
- <span class="c1"># to check if we are in a subpath. In that case we can't</span>
- <span class="c1"># set a cross domain cookie.</span>
- <span class="k">if</span> <span class="n">rv</span> <span class="ow">is</span> <span class="ow">not</span> <span class="kc">None</span><span class="p">:</span>
- <span class="n">path</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_cookie_path</span><span class="p">(</span><span class="n">app</span><span class="p">)</span>
- <span class="k">if</span> <span class="n">path</span> <span class="o">!=</span> <span class="s1">'/'</span><span class="p">:</span>
- <span class="n">rv</span> <span class="o">=</span> <span class="n">rv</span><span class="o">.</span><span class="n">lstrip</span><span class="p">(</span><span class="s1">'.'</span><span class="p">)</span>
- <span class="k">return</span> <span class="n">rv</span></div>
- <div class="viewcode-block" id="SessionInterface.get_cookie_path"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.get_cookie_path">[docs]</a> <span class="k">def</span> <span class="nf">get_cookie_path</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">):</span>
- <span class="sd">"""Returns the path for which the cookie should be valid. The</span>
- <span class="sd"> default implementation uses the value from the ``SESSION_COOKIE_PATH``</span>
- <span class="sd"> config var if it's set, and falls back to ``APPLICATION_ROOT`` or</span>
- <span class="sd"> uses ``/`` if it's ``None``.</span>
- <span class="sd"> """</span>
- <span class="k">return</span> <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">'SESSION_COOKIE_PATH'</span><span class="p">]</span> <span class="ow">or</span> \
- <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">'APPLICATION_ROOT'</span><span class="p">]</span> <span class="ow">or</span> <span class="s1">'/'</span></div>
- <div class="viewcode-block" id="SessionInterface.get_cookie_httponly"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.get_cookie_httponly">[docs]</a> <span class="k">def</span> <span class="nf">get_cookie_httponly</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">):</span>
- <span class="sd">"""Returns True if the session cookie should be httponly. This</span>
- <span class="sd"> currently just returns the value of the ``SESSION_COOKIE_HTTPONLY``</span>
- <span class="sd"> config var.</span>
- <span class="sd"> """</span>
- <span class="k">return</span> <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">'SESSION_COOKIE_HTTPONLY'</span><span class="p">]</span></div>
- <div class="viewcode-block" id="SessionInterface.get_cookie_secure"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.get_cookie_secure">[docs]</a> <span class="k">def</span> <span class="nf">get_cookie_secure</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">):</span>
- <span class="sd">"""Returns True if the cookie should be secure. This currently</span>
- <span class="sd"> just returns the value of the ``SESSION_COOKIE_SECURE`` setting.</span>
- <span class="sd"> """</span>
- <span class="k">return</span> <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">'SESSION_COOKIE_SECURE'</span><span class="p">]</span></div>
- <div class="viewcode-block" id="SessionInterface.get_expiration_time"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.get_expiration_time">[docs]</a> <span class="k">def</span> <span class="nf">get_expiration_time</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">,</span> <span class="n">session</span><span class="p">):</span>
- <span class="sd">"""A helper method that returns an expiration date for the session</span>
- <span class="sd"> or ``None`` if the session is linked to the browser session. The</span>
- <span class="sd"> default implementation returns now + the permanent session</span>
- <span class="sd"> lifetime configured on the application.</span>
- <span class="sd"> """</span>
- <span class="k">if</span> <span class="n">session</span><span class="o">.</span><span class="n">permanent</span><span class="p">:</span>
- <span class="k">return</span> <span class="n">datetime</span><span class="o">.</span><span class="n">utcnow</span><span class="p">()</span> <span class="o">+</span> <span class="n">app</span><span class="o">.</span><span class="n">permanent_session_lifetime</span></div>
- <div class="viewcode-block" id="SessionInterface.should_set_cookie"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.should_set_cookie">[docs]</a> <span class="k">def</span> <span class="nf">should_set_cookie</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">,</span> <span class="n">session</span><span class="p">):</span>
- <span class="sd">"""Indicates whether a cookie should be set now or not. This is</span>
- <span class="sd"> used by session backends to figure out if they should emit a</span>
- <span class="sd"> set-cookie header or not. The default behavior is controlled by</span>
- <span class="sd"> the ``SESSION_REFRESH_EACH_REQUEST`` config variable. If</span>
- <span class="sd"> it's set to ``False`` then a cookie is only set if the session is</span>
- <span class="sd"> modified, if set to ``True`` it's always set if the session is</span>
- <span class="sd"> permanent.</span>
- <span class="sd"> This check is usually skipped if sessions get deleted.</span>
- <span class="sd"> .. versionadded:: 0.11</span>
- <span class="sd"> """</span>
- <span class="k">if</span> <span class="n">session</span><span class="o">.</span><span class="n">modified</span><span class="p">:</span>
- <span class="k">return</span> <span class="kc">True</span>
- <span class="n">save_each</span> <span class="o">=</span> <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">'SESSION_REFRESH_EACH_REQUEST'</span><span class="p">]</span>
- <span class="k">return</span> <span class="n">save_each</span> <span class="ow">and</span> <span class="n">session</span><span class="o">.</span><span class="n">permanent</span></div>
- <div class="viewcode-block" id="SessionInterface.open_session"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.open_session">[docs]</a> <span class="k">def</span> <span class="nf">open_session</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">,</span> <span class="n">request</span><span class="p">):</span>
- <span class="sd">"""This method has to be implemented and must either return ``None``</span>
- <span class="sd"> in case the loading failed because of a configuration error or an</span>
- <span class="sd"> instance of a session object which implements a dictionary like</span>
- <span class="sd"> interface + the methods and attributes on :class:`SessionMixin`.</span>
- <span class="sd"> """</span>
- <span class="k">raise</span> <span class="ne">NotImplementedError</span><span class="p">()</span></div>
- <div class="viewcode-block" id="SessionInterface.save_session"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.save_session">[docs]</a> <span class="k">def</span> <span class="nf">save_session</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">,</span> <span class="n">session</span><span class="p">,</span> <span class="n">response</span><span class="p">):</span>
- <span class="sd">"""This is called for actual sessions returned by :meth:`open_session`</span>
- <span class="sd"> at the end of the request. This is still called during a request</span>
- <span class="sd"> context so if you absolutely need access to the request you can do</span>
- <span class="sd"> that.</span>
- <span class="sd"> """</span>
- <span class="k">raise</span> <span class="ne">NotImplementedError</span><span class="p">()</span></div></div>
- <div class="viewcode-block" id="SecureCookieSessionInterface"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SecureCookieSessionInterface">[docs]</a><span class="k">class</span> <span class="nc">SecureCookieSessionInterface</span><span class="p">(</span><span class="n">SessionInterface</span><span class="p">):</span>
- <span class="sd">"""The default session interface that stores sessions in signed cookies</span>
- <span class="sd"> through the :mod:`itsdangerous` module.</span>
- <span class="sd"> """</span>
- <span class="c1">#: the salt that should be applied on top of the secret key for the</span>
- <span class="c1">#: signing of cookie based sessions.</span>
- <span class="n">salt</span> <span class="o">=</span> <span class="s1">'cookie-session'</span>
- <span class="c1">#: the hash function to use for the signature. The default is sha1</span>
- <span class="n">digest_method</span> <span class="o">=</span> <span class="nb">staticmethod</span><span class="p">(</span><span class="n">hashlib</span><span class="o">.</span><span class="n">sha1</span><span class="p">)</span>
- <span class="c1">#: the name of the itsdangerous supported key derivation. The default</span>
- <span class="c1">#: is hmac.</span>
- <span class="n">key_derivation</span> <span class="o">=</span> <span class="s1">'hmac'</span>
- <span class="c1">#: A python serializer for the payload. The default is a compact</span>
- <span class="c1">#: JSON derived serializer with support for some extra Python types</span>
- <span class="c1">#: such as datetime objects or tuples.</span>
- <span class="n">serializer</span> <span class="o">=</span> <span class="n">session_json_serializer</span>
- <span class="n">session_class</span> <span class="o">=</span> <span class="n">SecureCookieSession</span>
- <div class="viewcode-block" id="SecureCookieSessionInterface.get_signing_serializer"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SecureCookieSessionInterface.get_signing_serializer">[docs]</a> <span class="k">def</span> <span class="nf">get_signing_serializer</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">):</span>
- <span class="k">if</span> <span class="ow">not</span> <span class="n">app</span><span class="o">.</span><span class="n">secret_key</span><span class="p">:</span>
- <span class="k">return</span> <span class="kc">None</span>
- <span class="n">signer_kwargs</span> <span class="o">=</span> <span class="nb">dict</span><span class="p">(</span>
- <span class="n">key_derivation</span><span class="o">=</span><span class="bp">self</span><span class="o">.</span><span class="n">key_derivation</span><span class="p">,</span>
- <span class="n">digest_method</span><span class="o">=</span><span class="bp">self</span><span class="o">.</span><span class="n">digest_method</span>
- <span class="p">)</span>
- <span class="k">return</span> <span class="n">URLSafeTimedSerializer</span><span class="p">(</span><span class="n">app</span><span class="o">.</span><span class="n">secret_key</span><span class="p">,</span> <span class="n">salt</span><span class="o">=</span><span class="bp">self</span><span class="o">.</span><span class="n">salt</span><span class="p">,</span>
- <span class="n">serializer</span><span class="o">=</span><span class="bp">self</span><span class="o">.</span><span class="n">serializer</span><span class="p">,</span>
- <span class="n">signer_kwargs</span><span class="o">=</span><span class="n">signer_kwargs</span><span class="p">)</span></div>
- <div class="viewcode-block" id="SecureCookieSessionInterface.open_session"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SecureCookieSessionInterface.open_session">[docs]</a> <span class="k">def</span> <span class="nf">open_session</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">,</span> <span class="n">request</span><span class="p">):</span>
- <span class="n">s</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_signing_serializer</span><span class="p">(</span><span class="n">app</span><span class="p">)</span>
- <span class="k">if</span> <span class="n">s</span> <span class="ow">is</span> <span class="kc">None</span><span class="p">:</span>
- <span class="k">return</span> <span class="kc">None</span>
- <span class="n">val</span> <span class="o">=</span> <span class="n">request</span><span class="o">.</span><span class="n">cookies</span><span class="o">.</span><span class="n">get</span><span class="p">(</span><span class="n">app</span><span class="o">.</span><span class="n">session_cookie_name</span><span class="p">)</span>
- <span class="k">if</span> <span class="ow">not</span> <span class="n">val</span><span class="p">:</span>
- <span class="k">return</span> <span class="bp">self</span><span class="o">.</span><span class="n">session_class</span><span class="p">()</span>
- <span class="n">max_age</span> <span class="o">=</span> <span class="n">total_seconds</span><span class="p">(</span><span class="n">app</span><span class="o">.</span><span class="n">permanent_session_lifetime</span><span class="p">)</span>
- <span class="k">try</span><span class="p">:</span>
- <span class="n">data</span> <span class="o">=</span> <span class="n">s</span><span class="o">.</span><span class="n">loads</span><span class="p">(</span><span class="n">val</span><span class="p">,</span> <span class="n">max_age</span><span class="o">=</span><span class="n">max_age</span><span class="p">)</span>
- <span class="k">return</span> <span class="bp">self</span><span class="o">.</span><span class="n">session_class</span><span class="p">(</span><span class="n">data</span><span class="p">)</span>
- <span class="k">except</span> <span class="n">BadSignature</span><span class="p">:</span>
- <span class="k">return</span> <span class="bp">self</span><span class="o">.</span><span class="n">session_class</span><span class="p">()</span></div>
- <div class="viewcode-block" id="SecureCookieSessionInterface.save_session"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SecureCookieSessionInterface.save_session">[docs]</a> <span class="k">def</span> <span class="nf">save_session</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">,</span> <span class="n">session</span><span class="p">,</span> <span class="n">response</span><span class="p">):</span>
- <span class="n">domain</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_cookie_domain</span><span class="p">(</span><span class="n">app</span><span class="p">)</span>
- <span class="n">path</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_cookie_path</span><span class="p">(</span><span class="n">app</span><span class="p">)</span>
- <span class="c1"># Delete case. If there is no session we bail early.</span>
- <span class="c1"># If the session was modified to be empty we remove the</span>
- <span class="c1"># whole cookie.</span>
- <span class="k">if</span> <span class="ow">not</span> <span class="n">session</span><span class="p">:</span>
- <span class="k">if</span> <span class="n">session</span><span class="o">.</span><span class="n">modified</span><span class="p">:</span>
- <span class="n">response</span><span class="o">.</span><span class="n">delete_cookie</span><span class="p">(</span><span class="n">app</span><span class="o">.</span><span class="n">session_cookie_name</span><span class="p">,</span>
- <span class="n">domain</span><span class="o">=</span><span class="n">domain</span><span class="p">,</span> <span class="n">path</span><span class="o">=</span><span class="n">path</span><span class="p">)</span>
- <span class="k">return</span>
- <span class="c1"># Modification case. There are upsides and downsides to</span>
- <span class="c1"># emitting a set-cookie header each request. The behavior</span>
- <span class="c1"># is controlled by the :meth:`should_set_cookie` method</span>
- <span class="c1"># which performs a quick check to figure out if the cookie</span>
- <span class="c1"># should be set or not. This is controlled by the</span>
- <span class="c1"># SESSION_REFRESH_EACH_REQUEST config flag as well as</span>
- <span class="c1"># the permanent flag on the session itself.</span>
- <span class="k">if</span> <span class="ow">not</span> <span class="bp">self</span><span class="o">.</span><span class="n">should_set_cookie</span><span class="p">(</span><span class="n">app</span><span class="p">,</span> <span class="n">session</span><span class="p">):</span>
- <span class="k">return</span>
- <span class="n">httponly</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_cookie_httponly</span><span class="p">(</span><span class="n">app</span><span class="p">)</span>
- <span class="n">secure</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_cookie_secure</span><span class="p">(</span><span class="n">app</span><span class="p">)</span>
- <span class="n">expires</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_expiration_time</span><span class="p">(</span><span class="n">app</span><span class="p">,</span> <span class="n">session</span><span class="p">)</span>
- <span class="n">val</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_signing_serializer</span><span class="p">(</span><span class="n">app</span><span class="p">)</span><span class="o">.</span><span class="n">dumps</span><span class="p">(</span><span class="nb">dict</span><span class="p">(</span><span class="n">session</span><span class="p">))</span>
- <span class="n">response</span><span class="o">.</span><span class="n">set_cookie</span><span class="p">(</span><span class="n">app</span><span class="o">.</span><span class="n">session_cookie_name</span><span class="p">,</span> <span class="n">val</span><span class="p">,</span>
- <span class="n">expires</span><span class="o">=</span><span class="n">expires</span><span class="p">,</span> <span class="n">httponly</span><span class="o">=</span><span class="n">httponly</span><span class="p">,</span>
- <span class="n">domain</span><span class="o">=</span><span class="n">domain</span><span class="p">,</span> <span class="n">path</span><span class="o">=</span><span class="n">path</span><span class="p">,</span> <span class="n">secure</span><span class="o">=</span><span class="n">secure</span><span class="p">)</span></div></div>
- </pre></div>
- </div>
- </div>
- </div>
- <div class="sphinxsidebar" role="navigation" aria-label="main navigation">
- <div class="sphinxsidebarwrapper"><div class="relations">
- <h3>Related Topics</h3>
- <ul>
- <li><a href="../../index.html">Documentation overview</a><ul>
- <li><a href="../index.html">Module code</a><ul>
- </ul></li>
- </ul></li>
- </ul>
- </div>
- <div id="searchbox" style="display: none" role="search">
- <h3>Quick search</h3>
- <form class="search" action="../../search.html" method="get">
- <div><input type="text" name="q" /></div>
- <div><input type="submit" value="Go" /></div>
- <input type="hidden" name="check_keywords" value="yes" />
- <input type="hidden" name="area" value="default" />
- </form>
- </div>
- <script type="text/javascript">$('#searchbox').show(0);</script>
- </div>
- </div>
- <div class="clearer"></div>
- </div>
- <div class="footer">
- ©2016, Author.
-
- |
- Powered by <a href="http://sphinx-doc.org/">Sphinx 1.4.8</a>
- & <a href="https://github.com/bitprophet/alabaster">Alabaster 0.7.9</a>
-
- </div>
-
-
- </body>
- </html>
|