sessions.html 48 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450
  1. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
  2. "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
  3. <html xmlns="http://www.w3.org/1999/xhtml" lang="en">
  4. <head>
  5. <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  6. <title>flask.sessions &#8212; proxypool documentation</title>
  7. <link rel="stylesheet" href="../../_static/alabaster.css" type="text/css" />
  8. <link rel="stylesheet" href="../../_static/pygments.css" type="text/css" />
  9. <script type="text/javascript">
  10. var DOCUMENTATION_OPTIONS = {
  11. URL_ROOT: '../../',
  12. VERSION: '',
  13. COLLAPSE_INDEX: false,
  14. FILE_SUFFIX: '.html',
  15. HAS_SOURCE: true
  16. };
  17. </script>
  18. <script type="text/javascript" src="../../_static/jquery.js"></script>
  19. <script type="text/javascript" src="../../_static/underscore.js"></script>
  20. <script type="text/javascript" src="../../_static/doctools.js"></script>
  21. <link rel="index" title="Index" href="../../genindex.html" />
  22. <link rel="search" title="Search" href="../../search.html" />
  23. <link rel="top" title="proxypool documentation" href="../../index.html" />
  24. <link rel="up" title="Module code" href="../index.html" />
  25. <link rel="stylesheet" href="../../_static/custom.css" type="text/css" />
  26. <meta name="viewport" content="width=device-width, initial-scale=0.9, maximum-scale=0.9" />
  27. </head>
  28. <body role="document">
  29. <div class="document">
  30. <div class="documentwrapper">
  31. <div class="bodywrapper">
  32. <div class="body" role="main">
  33. <h1>Source code for flask.sessions</h1><div class="highlight"><pre>
  34. <span></span><span class="c1"># -*- coding: utf-8 -*-</span>
  35. <span class="sd">&quot;&quot;&quot;</span>
  36. <span class="sd"> flask.sessions</span>
  37. <span class="sd"> ~~~~~~~~~~~~~~</span>
  38. <span class="sd"> Implements cookie based sessions based on itsdangerous.</span>
  39. <span class="sd"> :copyright: (c) 2015 by Armin Ronacher.</span>
  40. <span class="sd"> :license: BSD, see LICENSE for more details.</span>
  41. <span class="sd">&quot;&quot;&quot;</span>
  42. <span class="kn">import</span> <span class="nn">uuid</span>
  43. <span class="kn">import</span> <span class="nn">hashlib</span>
  44. <span class="kn">from</span> <span class="nn">base64</span> <span class="k">import</span> <span class="n">b64encode</span><span class="p">,</span> <span class="n">b64decode</span>
  45. <span class="kn">from</span> <span class="nn">datetime</span> <span class="k">import</span> <span class="n">datetime</span>
  46. <span class="kn">from</span> <span class="nn">werkzeug.http</span> <span class="k">import</span> <span class="n">http_date</span><span class="p">,</span> <span class="n">parse_date</span>
  47. <span class="kn">from</span> <span class="nn">werkzeug.datastructures</span> <span class="k">import</span> <span class="n">CallbackDict</span>
  48. <span class="kn">from</span> <span class="nn">.</span> <span class="k">import</span> <span class="n">Markup</span><span class="p">,</span> <span class="n">json</span>
  49. <span class="kn">from</span> <span class="nn">._compat</span> <span class="k">import</span> <span class="n">iteritems</span><span class="p">,</span> <span class="n">text_type</span>
  50. <span class="kn">from</span> <span class="nn">.helpers</span> <span class="k">import</span> <span class="n">total_seconds</span>
  51. <span class="kn">from</span> <span class="nn">itsdangerous</span> <span class="k">import</span> <span class="n">URLSafeTimedSerializer</span><span class="p">,</span> <span class="n">BadSignature</span>
  52. <div class="viewcode-block" id="SessionMixin"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionMixin">[docs]</a><span class="k">class</span> <span class="nc">SessionMixin</span><span class="p">(</span><span class="nb">object</span><span class="p">):</span>
  53. <span class="sd">&quot;&quot;&quot;Expands a basic dictionary with an accessors that are expected</span>
  54. <span class="sd"> by Flask extensions and users for the session.</span>
  55. <span class="sd"> &quot;&quot;&quot;</span>
  56. <span class="k">def</span> <span class="nf">_get_permanent</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
  57. <span class="k">return</span> <span class="bp">self</span><span class="o">.</span><span class="n">get</span><span class="p">(</span><span class="s1">&#39;_permanent&#39;</span><span class="p">,</span> <span class="kc">False</span><span class="p">)</span>
  58. <span class="k">def</span> <span class="nf">_set_permanent</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">value</span><span class="p">):</span>
  59. <span class="bp">self</span><span class="p">[</span><span class="s1">&#39;_permanent&#39;</span><span class="p">]</span> <span class="o">=</span> <span class="nb">bool</span><span class="p">(</span><span class="n">value</span><span class="p">)</span>
  60. <span class="c1">#: this reflects the ``&#39;_permanent&#39;`` key in the dict.</span>
  61. <span class="n">permanent</span> <span class="o">=</span> <span class="nb">property</span><span class="p">(</span><span class="n">_get_permanent</span><span class="p">,</span> <span class="n">_set_permanent</span><span class="p">)</span>
  62. <span class="k">del</span> <span class="n">_get_permanent</span><span class="p">,</span> <span class="n">_set_permanent</span>
  63. <span class="c1">#: some session backends can tell you if a session is new, but that is</span>
  64. <span class="c1">#: not necessarily guaranteed. Use with caution. The default mixin</span>
  65. <span class="c1">#: implementation just hardcodes ``False`` in.</span>
  66. <span class="n">new</span> <span class="o">=</span> <span class="kc">False</span>
  67. <span class="c1">#: for some backends this will always be ``True``, but some backends will</span>
  68. <span class="c1">#: default this to false and detect changes in the dictionary for as</span>
  69. <span class="c1">#: long as changes do not happen on mutable structures in the session.</span>
  70. <span class="c1">#: The default mixin implementation just hardcodes ``True`` in.</span>
  71. <span class="n">modified</span> <span class="o">=</span> <span class="kc">True</span></div>
  72. <span class="k">def</span> <span class="nf">_tag</span><span class="p">(</span><span class="n">value</span><span class="p">):</span>
  73. <span class="k">if</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="nb">tuple</span><span class="p">):</span>
  74. <span class="k">return</span> <span class="p">{</span><span class="s1">&#39; t&#39;</span><span class="p">:</span> <span class="p">[</span><span class="n">_tag</span><span class="p">(</span><span class="n">x</span><span class="p">)</span> <span class="k">for</span> <span class="n">x</span> <span class="ow">in</span> <span class="n">value</span><span class="p">]}</span>
  75. <span class="k">elif</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="n">uuid</span><span class="o">.</span><span class="n">UUID</span><span class="p">):</span>
  76. <span class="k">return</span> <span class="p">{</span><span class="s1">&#39; u&#39;</span><span class="p">:</span> <span class="n">value</span><span class="o">.</span><span class="n">hex</span><span class="p">}</span>
  77. <span class="k">elif</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="nb">bytes</span><span class="p">):</span>
  78. <span class="k">return</span> <span class="p">{</span><span class="s1">&#39; b&#39;</span><span class="p">:</span> <span class="n">b64encode</span><span class="p">(</span><span class="n">value</span><span class="p">)</span><span class="o">.</span><span class="n">decode</span><span class="p">(</span><span class="s1">&#39;ascii&#39;</span><span class="p">)}</span>
  79. <span class="k">elif</span> <span class="n">callable</span><span class="p">(</span><span class="nb">getattr</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="s1">&#39;__html__&#39;</span><span class="p">,</span> <span class="kc">None</span><span class="p">)):</span>
  80. <span class="k">return</span> <span class="p">{</span><span class="s1">&#39; m&#39;</span><span class="p">:</span> <span class="n">text_type</span><span class="p">(</span><span class="n">value</span><span class="o">.</span><span class="n">__html__</span><span class="p">())}</span>
  81. <span class="k">elif</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="nb">list</span><span class="p">):</span>
  82. <span class="k">return</span> <span class="p">[</span><span class="n">_tag</span><span class="p">(</span><span class="n">x</span><span class="p">)</span> <span class="k">for</span> <span class="n">x</span> <span class="ow">in</span> <span class="n">value</span><span class="p">]</span>
  83. <span class="k">elif</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="n">datetime</span><span class="p">):</span>
  84. <span class="k">return</span> <span class="p">{</span><span class="s1">&#39; d&#39;</span><span class="p">:</span> <span class="n">http_date</span><span class="p">(</span><span class="n">value</span><span class="p">)}</span>
  85. <span class="k">elif</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="nb">dict</span><span class="p">):</span>
  86. <span class="k">return</span> <span class="nb">dict</span><span class="p">((</span><span class="n">k</span><span class="p">,</span> <span class="n">_tag</span><span class="p">(</span><span class="n">v</span><span class="p">))</span> <span class="k">for</span> <span class="n">k</span><span class="p">,</span> <span class="n">v</span> <span class="ow">in</span> <span class="n">iteritems</span><span class="p">(</span><span class="n">value</span><span class="p">))</span>
  87. <span class="k">elif</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="nb">str</span><span class="p">):</span>
  88. <span class="k">try</span><span class="p">:</span>
  89. <span class="k">return</span> <span class="n">text_type</span><span class="p">(</span><span class="n">value</span><span class="p">)</span>
  90. <span class="k">except</span> <span class="ne">UnicodeError</span><span class="p">:</span>
  91. <span class="kn">from</span> <span class="nn">flask.debughelpers</span> <span class="k">import</span> <span class="n">UnexpectedUnicodeError</span>
  92. <span class="k">raise</span> <span class="n">UnexpectedUnicodeError</span><span class="p">(</span><span class="s1">u&#39;A byte string with &#39;</span>
  93. <span class="s1">u&#39;non-ASCII data was passed to the session system &#39;</span>
  94. <span class="s1">u&#39;which can only store unicode strings. Consider &#39;</span>
  95. <span class="s1">u&#39;base64 encoding your string (String was </span><span class="si">%r</span><span class="s1">)&#39;</span> <span class="o">%</span> <span class="n">value</span><span class="p">)</span>
  96. <span class="k">return</span> <span class="n">value</span>
  97. <div class="viewcode-block" id="TaggedJSONSerializer"><a class="viewcode-back" href="../../flask/flask.html#flask.app.TaggedJSONSerializer">[docs]</a><span class="k">class</span> <span class="nc">TaggedJSONSerializer</span><span class="p">(</span><span class="nb">object</span><span class="p">):</span>
  98. <span class="sd">&quot;&quot;&quot;A customized JSON serializer that supports a few extra types that</span>
  99. <span class="sd"> we take for granted when serializing (tuples, markup objects, datetime).</span>
  100. <span class="sd"> &quot;&quot;&quot;</span>
  101. <div class="viewcode-block" id="TaggedJSONSerializer.dumps"><a class="viewcode-back" href="../../flask/flask.html#flask.app.TaggedJSONSerializer.dumps">[docs]</a> <span class="k">def</span> <span class="nf">dumps</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">value</span><span class="p">):</span>
  102. <span class="k">return</span> <span class="n">json</span><span class="o">.</span><span class="n">dumps</span><span class="p">(</span><span class="n">_tag</span><span class="p">(</span><span class="n">value</span><span class="p">),</span> <span class="n">separators</span><span class="o">=</span><span class="p">(</span><span class="s1">&#39;,&#39;</span><span class="p">,</span> <span class="s1">&#39;:&#39;</span><span class="p">))</span></div>
  103. <div class="viewcode-block" id="TaggedJSONSerializer.loads"><a class="viewcode-back" href="../../flask/flask.html#flask.app.TaggedJSONSerializer.loads">[docs]</a> <span class="k">def</span> <span class="nf">loads</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">value</span><span class="p">):</span>
  104. <span class="k">def</span> <span class="nf">object_hook</span><span class="p">(</span><span class="n">obj</span><span class="p">):</span>
  105. <span class="k">if</span> <span class="nb">len</span><span class="p">(</span><span class="n">obj</span><span class="p">)</span> <span class="o">!=</span> <span class="mi">1</span><span class="p">:</span>
  106. <span class="k">return</span> <span class="n">obj</span>
  107. <span class="n">the_key</span><span class="p">,</span> <span class="n">the_value</span> <span class="o">=</span> <span class="nb">next</span><span class="p">(</span><span class="n">iteritems</span><span class="p">(</span><span class="n">obj</span><span class="p">))</span>
  108. <span class="k">if</span> <span class="n">the_key</span> <span class="o">==</span> <span class="s1">&#39; t&#39;</span><span class="p">:</span>
  109. <span class="k">return</span> <span class="nb">tuple</span><span class="p">(</span><span class="n">the_value</span><span class="p">)</span>
  110. <span class="k">elif</span> <span class="n">the_key</span> <span class="o">==</span> <span class="s1">&#39; u&#39;</span><span class="p">:</span>
  111. <span class="k">return</span> <span class="n">uuid</span><span class="o">.</span><span class="n">UUID</span><span class="p">(</span><span class="n">the_value</span><span class="p">)</span>
  112. <span class="k">elif</span> <span class="n">the_key</span> <span class="o">==</span> <span class="s1">&#39; b&#39;</span><span class="p">:</span>
  113. <span class="k">return</span> <span class="n">b64decode</span><span class="p">(</span><span class="n">the_value</span><span class="p">)</span>
  114. <span class="k">elif</span> <span class="n">the_key</span> <span class="o">==</span> <span class="s1">&#39; m&#39;</span><span class="p">:</span>
  115. <span class="k">return</span> <span class="n">Markup</span><span class="p">(</span><span class="n">the_value</span><span class="p">)</span>
  116. <span class="k">elif</span> <span class="n">the_key</span> <span class="o">==</span> <span class="s1">&#39; d&#39;</span><span class="p">:</span>
  117. <span class="k">return</span> <span class="n">parse_date</span><span class="p">(</span><span class="n">the_value</span><span class="p">)</span>
  118. <span class="k">return</span> <span class="n">obj</span>
  119. <span class="k">return</span> <span class="n">json</span><span class="o">.</span><span class="n">loads</span><span class="p">(</span><span class="n">value</span><span class="p">,</span> <span class="n">object_hook</span><span class="o">=</span><span class="n">object_hook</span><span class="p">)</span></div></div>
  120. <span class="n">session_json_serializer</span> <span class="o">=</span> <span class="n">TaggedJSONSerializer</span><span class="p">()</span>
  121. <div class="viewcode-block" id="SecureCookieSession"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SecureCookieSession">[docs]</a><span class="k">class</span> <span class="nc">SecureCookieSession</span><span class="p">(</span><span class="n">CallbackDict</span><span class="p">,</span> <span class="n">SessionMixin</span><span class="p">):</span>
  122. <span class="sd">&quot;&quot;&quot;Base class for sessions based on signed cookies.&quot;&quot;&quot;</span>
  123. <span class="k">def</span> <span class="nf">__init__</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">initial</span><span class="o">=</span><span class="kc">None</span><span class="p">):</span>
  124. <span class="k">def</span> <span class="nf">on_update</span><span class="p">(</span><span class="bp">self</span><span class="p">):</span>
  125. <span class="bp">self</span><span class="o">.</span><span class="n">modified</span> <span class="o">=</span> <span class="kc">True</span>
  126. <span class="n">CallbackDict</span><span class="o">.</span><span class="n">__init__</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">initial</span><span class="p">,</span> <span class="n">on_update</span><span class="p">)</span>
  127. <span class="bp">self</span><span class="o">.</span><span class="n">modified</span> <span class="o">=</span> <span class="kc">False</span></div>
  128. <div class="viewcode-block" id="NullSession"><a class="viewcode-back" href="../../flask/flask.html#flask.app.NullSession">[docs]</a><span class="k">class</span> <span class="nc">NullSession</span><span class="p">(</span><span class="n">SecureCookieSession</span><span class="p">):</span>
  129. <span class="sd">&quot;&quot;&quot;Class used to generate nicer error messages if sessions are not</span>
  130. <span class="sd"> available. Will still allow read-only access to the empty session</span>
  131. <span class="sd"> but fail on setting.</span>
  132. <span class="sd"> &quot;&quot;&quot;</span>
  133. <span class="k">def</span> <span class="nf">_fail</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="o">*</span><span class="n">args</span><span class="p">,</span> <span class="o">**</span><span class="n">kwargs</span><span class="p">):</span>
  134. <span class="k">raise</span> <span class="ne">RuntimeError</span><span class="p">(</span><span class="s1">&#39;The session is unavailable because no secret &#39;</span>
  135. <span class="s1">&#39;key was set. Set the secret_key on the &#39;</span>
  136. <span class="s1">&#39;application to something unique and secret.&#39;</span><span class="p">)</span>
  137. <span class="n">__setitem__</span> <span class="o">=</span> <span class="n">__delitem__</span> <span class="o">=</span> <span class="n">clear</span> <span class="o">=</span> <span class="n">pop</span> <span class="o">=</span> <span class="n">popitem</span> <span class="o">=</span> \
  138. <span class="n">update</span> <span class="o">=</span> <span class="n">setdefault</span> <span class="o">=</span> <span class="n">_fail</span>
  139. <span class="k">del</span> <span class="n">_fail</span></div>
  140. <div class="viewcode-block" id="SessionInterface"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface">[docs]</a><span class="k">class</span> <span class="nc">SessionInterface</span><span class="p">(</span><span class="nb">object</span><span class="p">):</span>
  141. <span class="sd">&quot;&quot;&quot;The basic interface you have to implement in order to replace the</span>
  142. <span class="sd"> default session interface which uses werkzeug&#39;s securecookie</span>
  143. <span class="sd"> implementation. The only methods you have to implement are</span>
  144. <span class="sd"> :meth:`open_session` and :meth:`save_session`, the others have</span>
  145. <span class="sd"> useful defaults which you don&#39;t need to change.</span>
  146. <span class="sd"> The session object returned by the :meth:`open_session` method has to</span>
  147. <span class="sd"> provide a dictionary like interface plus the properties and methods</span>
  148. <span class="sd"> from the :class:`SessionMixin`. We recommend just subclassing a dict</span>
  149. <span class="sd"> and adding that mixin::</span>
  150. <span class="sd"> class Session(dict, SessionMixin):</span>
  151. <span class="sd"> pass</span>
  152. <span class="sd"> If :meth:`open_session` returns ``None`` Flask will call into</span>
  153. <span class="sd"> :meth:`make_null_session` to create a session that acts as replacement</span>
  154. <span class="sd"> if the session support cannot work because some requirement is not</span>
  155. <span class="sd"> fulfilled. The default :class:`NullSession` class that is created</span>
  156. <span class="sd"> will complain that the secret key was not set.</span>
  157. <span class="sd"> To replace the session interface on an application all you have to do</span>
  158. <span class="sd"> is to assign :attr:`flask.Flask.session_interface`::</span>
  159. <span class="sd"> app = Flask(__name__)</span>
  160. <span class="sd"> app.session_interface = MySessionInterface()</span>
  161. <span class="sd"> .. versionadded:: 0.8</span>
  162. <span class="sd"> &quot;&quot;&quot;</span>
  163. <span class="c1">#: :meth:`make_null_session` will look here for the class that should</span>
  164. <span class="c1">#: be created when a null session is requested. Likewise the</span>
  165. <span class="c1">#: :meth:`is_null_session` method will perform a typecheck against</span>
  166. <span class="c1">#: this type.</span>
  167. <span class="n">null_session_class</span> <span class="o">=</span> <span class="n">NullSession</span>
  168. <span class="c1">#: A flag that indicates if the session interface is pickle based.</span>
  169. <span class="c1">#: This can be used by flask extensions to make a decision in regards</span>
  170. <span class="c1">#: to how to deal with the session object.</span>
  171. <span class="c1">#:</span>
  172. <span class="c1">#: .. versionadded:: 0.10</span>
  173. <span class="n">pickle_based</span> <span class="o">=</span> <span class="kc">False</span>
  174. <div class="viewcode-block" id="SessionInterface.make_null_session"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.make_null_session">[docs]</a> <span class="k">def</span> <span class="nf">make_null_session</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">):</span>
  175. <span class="sd">&quot;&quot;&quot;Creates a null session which acts as a replacement object if the</span>
  176. <span class="sd"> real session support could not be loaded due to a configuration</span>
  177. <span class="sd"> error. This mainly aids the user experience because the job of the</span>
  178. <span class="sd"> null session is to still support lookup without complaining but</span>
  179. <span class="sd"> modifications are answered with a helpful error message of what</span>
  180. <span class="sd"> failed.</span>
  181. <span class="sd"> This creates an instance of :attr:`null_session_class` by default.</span>
  182. <span class="sd"> &quot;&quot;&quot;</span>
  183. <span class="k">return</span> <span class="bp">self</span><span class="o">.</span><span class="n">null_session_class</span><span class="p">()</span></div>
  184. <div class="viewcode-block" id="SessionInterface.is_null_session"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.is_null_session">[docs]</a> <span class="k">def</span> <span class="nf">is_null_session</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">obj</span><span class="p">):</span>
  185. <span class="sd">&quot;&quot;&quot;Checks if a given object is a null session. Null sessions are</span>
  186. <span class="sd"> not asked to be saved.</span>
  187. <span class="sd"> This checks if the object is an instance of :attr:`null_session_class`</span>
  188. <span class="sd"> by default.</span>
  189. <span class="sd"> &quot;&quot;&quot;</span>
  190. <span class="k">return</span> <span class="nb">isinstance</span><span class="p">(</span><span class="n">obj</span><span class="p">,</span> <span class="bp">self</span><span class="o">.</span><span class="n">null_session_class</span><span class="p">)</span></div>
  191. <div class="viewcode-block" id="SessionInterface.get_cookie_domain"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.get_cookie_domain">[docs]</a> <span class="k">def</span> <span class="nf">get_cookie_domain</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">):</span>
  192. <span class="sd">&quot;&quot;&quot;Helpful helper method that returns the cookie domain that should</span>
  193. <span class="sd"> be used for the session cookie if session cookies are used.</span>
  194. <span class="sd"> &quot;&quot;&quot;</span>
  195. <span class="k">if</span> <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">&#39;SESSION_COOKIE_DOMAIN&#39;</span><span class="p">]</span> <span class="ow">is</span> <span class="ow">not</span> <span class="kc">None</span><span class="p">:</span>
  196. <span class="k">return</span> <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">&#39;SESSION_COOKIE_DOMAIN&#39;</span><span class="p">]</span>
  197. <span class="k">if</span> <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">&#39;SERVER_NAME&#39;</span><span class="p">]</span> <span class="ow">is</span> <span class="ow">not</span> <span class="kc">None</span><span class="p">:</span>
  198. <span class="c1"># chop off the port which is usually not supported by browsers</span>
  199. <span class="n">rv</span> <span class="o">=</span> <span class="s1">&#39;.&#39;</span> <span class="o">+</span> <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">&#39;SERVER_NAME&#39;</span><span class="p">]</span><span class="o">.</span><span class="n">rsplit</span><span class="p">(</span><span class="s1">&#39;:&#39;</span><span class="p">,</span> <span class="mi">1</span><span class="p">)[</span><span class="mi">0</span><span class="p">]</span>
  200. <span class="c1"># Google chrome does not like cookies set to .localhost, so</span>
  201. <span class="c1"># we just go with no domain then. Flask documents anyways that</span>
  202. <span class="c1"># cross domain cookies need a fully qualified domain name</span>
  203. <span class="k">if</span> <span class="n">rv</span> <span class="o">==</span> <span class="s1">&#39;.localhost&#39;</span><span class="p">:</span>
  204. <span class="n">rv</span> <span class="o">=</span> <span class="kc">None</span>
  205. <span class="c1"># If we infer the cookie domain from the server name we need</span>
  206. <span class="c1"># to check if we are in a subpath. In that case we can&#39;t</span>
  207. <span class="c1"># set a cross domain cookie.</span>
  208. <span class="k">if</span> <span class="n">rv</span> <span class="ow">is</span> <span class="ow">not</span> <span class="kc">None</span><span class="p">:</span>
  209. <span class="n">path</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_cookie_path</span><span class="p">(</span><span class="n">app</span><span class="p">)</span>
  210. <span class="k">if</span> <span class="n">path</span> <span class="o">!=</span> <span class="s1">&#39;/&#39;</span><span class="p">:</span>
  211. <span class="n">rv</span> <span class="o">=</span> <span class="n">rv</span><span class="o">.</span><span class="n">lstrip</span><span class="p">(</span><span class="s1">&#39;.&#39;</span><span class="p">)</span>
  212. <span class="k">return</span> <span class="n">rv</span></div>
  213. <div class="viewcode-block" id="SessionInterface.get_cookie_path"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.get_cookie_path">[docs]</a> <span class="k">def</span> <span class="nf">get_cookie_path</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">):</span>
  214. <span class="sd">&quot;&quot;&quot;Returns the path for which the cookie should be valid. The</span>
  215. <span class="sd"> default implementation uses the value from the ``SESSION_COOKIE_PATH``</span>
  216. <span class="sd"> config var if it&#39;s set, and falls back to ``APPLICATION_ROOT`` or</span>
  217. <span class="sd"> uses ``/`` if it&#39;s ``None``.</span>
  218. <span class="sd"> &quot;&quot;&quot;</span>
  219. <span class="k">return</span> <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">&#39;SESSION_COOKIE_PATH&#39;</span><span class="p">]</span> <span class="ow">or</span> \
  220. <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">&#39;APPLICATION_ROOT&#39;</span><span class="p">]</span> <span class="ow">or</span> <span class="s1">&#39;/&#39;</span></div>
  221. <div class="viewcode-block" id="SessionInterface.get_cookie_httponly"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.get_cookie_httponly">[docs]</a> <span class="k">def</span> <span class="nf">get_cookie_httponly</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">):</span>
  222. <span class="sd">&quot;&quot;&quot;Returns True if the session cookie should be httponly. This</span>
  223. <span class="sd"> currently just returns the value of the ``SESSION_COOKIE_HTTPONLY``</span>
  224. <span class="sd"> config var.</span>
  225. <span class="sd"> &quot;&quot;&quot;</span>
  226. <span class="k">return</span> <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">&#39;SESSION_COOKIE_HTTPONLY&#39;</span><span class="p">]</span></div>
  227. <div class="viewcode-block" id="SessionInterface.get_cookie_secure"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.get_cookie_secure">[docs]</a> <span class="k">def</span> <span class="nf">get_cookie_secure</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">):</span>
  228. <span class="sd">&quot;&quot;&quot;Returns True if the cookie should be secure. This currently</span>
  229. <span class="sd"> just returns the value of the ``SESSION_COOKIE_SECURE`` setting.</span>
  230. <span class="sd"> &quot;&quot;&quot;</span>
  231. <span class="k">return</span> <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">&#39;SESSION_COOKIE_SECURE&#39;</span><span class="p">]</span></div>
  232. <div class="viewcode-block" id="SessionInterface.get_expiration_time"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.get_expiration_time">[docs]</a> <span class="k">def</span> <span class="nf">get_expiration_time</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">,</span> <span class="n">session</span><span class="p">):</span>
  233. <span class="sd">&quot;&quot;&quot;A helper method that returns an expiration date for the session</span>
  234. <span class="sd"> or ``None`` if the session is linked to the browser session. The</span>
  235. <span class="sd"> default implementation returns now + the permanent session</span>
  236. <span class="sd"> lifetime configured on the application.</span>
  237. <span class="sd"> &quot;&quot;&quot;</span>
  238. <span class="k">if</span> <span class="n">session</span><span class="o">.</span><span class="n">permanent</span><span class="p">:</span>
  239. <span class="k">return</span> <span class="n">datetime</span><span class="o">.</span><span class="n">utcnow</span><span class="p">()</span> <span class="o">+</span> <span class="n">app</span><span class="o">.</span><span class="n">permanent_session_lifetime</span></div>
  240. <div class="viewcode-block" id="SessionInterface.should_set_cookie"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.should_set_cookie">[docs]</a> <span class="k">def</span> <span class="nf">should_set_cookie</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">,</span> <span class="n">session</span><span class="p">):</span>
  241. <span class="sd">&quot;&quot;&quot;Indicates whether a cookie should be set now or not. This is</span>
  242. <span class="sd"> used by session backends to figure out if they should emit a</span>
  243. <span class="sd"> set-cookie header or not. The default behavior is controlled by</span>
  244. <span class="sd"> the ``SESSION_REFRESH_EACH_REQUEST`` config variable. If</span>
  245. <span class="sd"> it&#39;s set to ``False`` then a cookie is only set if the session is</span>
  246. <span class="sd"> modified, if set to ``True`` it&#39;s always set if the session is</span>
  247. <span class="sd"> permanent.</span>
  248. <span class="sd"> This check is usually skipped if sessions get deleted.</span>
  249. <span class="sd"> .. versionadded:: 0.11</span>
  250. <span class="sd"> &quot;&quot;&quot;</span>
  251. <span class="k">if</span> <span class="n">session</span><span class="o">.</span><span class="n">modified</span><span class="p">:</span>
  252. <span class="k">return</span> <span class="kc">True</span>
  253. <span class="n">save_each</span> <span class="o">=</span> <span class="n">app</span><span class="o">.</span><span class="n">config</span><span class="p">[</span><span class="s1">&#39;SESSION_REFRESH_EACH_REQUEST&#39;</span><span class="p">]</span>
  254. <span class="k">return</span> <span class="n">save_each</span> <span class="ow">and</span> <span class="n">session</span><span class="o">.</span><span class="n">permanent</span></div>
  255. <div class="viewcode-block" id="SessionInterface.open_session"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.open_session">[docs]</a> <span class="k">def</span> <span class="nf">open_session</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">,</span> <span class="n">request</span><span class="p">):</span>
  256. <span class="sd">&quot;&quot;&quot;This method has to be implemented and must either return ``None``</span>
  257. <span class="sd"> in case the loading failed because of a configuration error or an</span>
  258. <span class="sd"> instance of a session object which implements a dictionary like</span>
  259. <span class="sd"> interface + the methods and attributes on :class:`SessionMixin`.</span>
  260. <span class="sd"> &quot;&quot;&quot;</span>
  261. <span class="k">raise</span> <span class="ne">NotImplementedError</span><span class="p">()</span></div>
  262. <div class="viewcode-block" id="SessionInterface.save_session"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SessionInterface.save_session">[docs]</a> <span class="k">def</span> <span class="nf">save_session</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">,</span> <span class="n">session</span><span class="p">,</span> <span class="n">response</span><span class="p">):</span>
  263. <span class="sd">&quot;&quot;&quot;This is called for actual sessions returned by :meth:`open_session`</span>
  264. <span class="sd"> at the end of the request. This is still called during a request</span>
  265. <span class="sd"> context so if you absolutely need access to the request you can do</span>
  266. <span class="sd"> that.</span>
  267. <span class="sd"> &quot;&quot;&quot;</span>
  268. <span class="k">raise</span> <span class="ne">NotImplementedError</span><span class="p">()</span></div></div>
  269. <div class="viewcode-block" id="SecureCookieSessionInterface"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SecureCookieSessionInterface">[docs]</a><span class="k">class</span> <span class="nc">SecureCookieSessionInterface</span><span class="p">(</span><span class="n">SessionInterface</span><span class="p">):</span>
  270. <span class="sd">&quot;&quot;&quot;The default session interface that stores sessions in signed cookies</span>
  271. <span class="sd"> through the :mod:`itsdangerous` module.</span>
  272. <span class="sd"> &quot;&quot;&quot;</span>
  273. <span class="c1">#: the salt that should be applied on top of the secret key for the</span>
  274. <span class="c1">#: signing of cookie based sessions.</span>
  275. <span class="n">salt</span> <span class="o">=</span> <span class="s1">&#39;cookie-session&#39;</span>
  276. <span class="c1">#: the hash function to use for the signature. The default is sha1</span>
  277. <span class="n">digest_method</span> <span class="o">=</span> <span class="nb">staticmethod</span><span class="p">(</span><span class="n">hashlib</span><span class="o">.</span><span class="n">sha1</span><span class="p">)</span>
  278. <span class="c1">#: the name of the itsdangerous supported key derivation. The default</span>
  279. <span class="c1">#: is hmac.</span>
  280. <span class="n">key_derivation</span> <span class="o">=</span> <span class="s1">&#39;hmac&#39;</span>
  281. <span class="c1">#: A python serializer for the payload. The default is a compact</span>
  282. <span class="c1">#: JSON derived serializer with support for some extra Python types</span>
  283. <span class="c1">#: such as datetime objects or tuples.</span>
  284. <span class="n">serializer</span> <span class="o">=</span> <span class="n">session_json_serializer</span>
  285. <span class="n">session_class</span> <span class="o">=</span> <span class="n">SecureCookieSession</span>
  286. <div class="viewcode-block" id="SecureCookieSessionInterface.get_signing_serializer"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SecureCookieSessionInterface.get_signing_serializer">[docs]</a> <span class="k">def</span> <span class="nf">get_signing_serializer</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">):</span>
  287. <span class="k">if</span> <span class="ow">not</span> <span class="n">app</span><span class="o">.</span><span class="n">secret_key</span><span class="p">:</span>
  288. <span class="k">return</span> <span class="kc">None</span>
  289. <span class="n">signer_kwargs</span> <span class="o">=</span> <span class="nb">dict</span><span class="p">(</span>
  290. <span class="n">key_derivation</span><span class="o">=</span><span class="bp">self</span><span class="o">.</span><span class="n">key_derivation</span><span class="p">,</span>
  291. <span class="n">digest_method</span><span class="o">=</span><span class="bp">self</span><span class="o">.</span><span class="n">digest_method</span>
  292. <span class="p">)</span>
  293. <span class="k">return</span> <span class="n">URLSafeTimedSerializer</span><span class="p">(</span><span class="n">app</span><span class="o">.</span><span class="n">secret_key</span><span class="p">,</span> <span class="n">salt</span><span class="o">=</span><span class="bp">self</span><span class="o">.</span><span class="n">salt</span><span class="p">,</span>
  294. <span class="n">serializer</span><span class="o">=</span><span class="bp">self</span><span class="o">.</span><span class="n">serializer</span><span class="p">,</span>
  295. <span class="n">signer_kwargs</span><span class="o">=</span><span class="n">signer_kwargs</span><span class="p">)</span></div>
  296. <div class="viewcode-block" id="SecureCookieSessionInterface.open_session"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SecureCookieSessionInterface.open_session">[docs]</a> <span class="k">def</span> <span class="nf">open_session</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">,</span> <span class="n">request</span><span class="p">):</span>
  297. <span class="n">s</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_signing_serializer</span><span class="p">(</span><span class="n">app</span><span class="p">)</span>
  298. <span class="k">if</span> <span class="n">s</span> <span class="ow">is</span> <span class="kc">None</span><span class="p">:</span>
  299. <span class="k">return</span> <span class="kc">None</span>
  300. <span class="n">val</span> <span class="o">=</span> <span class="n">request</span><span class="o">.</span><span class="n">cookies</span><span class="o">.</span><span class="n">get</span><span class="p">(</span><span class="n">app</span><span class="o">.</span><span class="n">session_cookie_name</span><span class="p">)</span>
  301. <span class="k">if</span> <span class="ow">not</span> <span class="n">val</span><span class="p">:</span>
  302. <span class="k">return</span> <span class="bp">self</span><span class="o">.</span><span class="n">session_class</span><span class="p">()</span>
  303. <span class="n">max_age</span> <span class="o">=</span> <span class="n">total_seconds</span><span class="p">(</span><span class="n">app</span><span class="o">.</span><span class="n">permanent_session_lifetime</span><span class="p">)</span>
  304. <span class="k">try</span><span class="p">:</span>
  305. <span class="n">data</span> <span class="o">=</span> <span class="n">s</span><span class="o">.</span><span class="n">loads</span><span class="p">(</span><span class="n">val</span><span class="p">,</span> <span class="n">max_age</span><span class="o">=</span><span class="n">max_age</span><span class="p">)</span>
  306. <span class="k">return</span> <span class="bp">self</span><span class="o">.</span><span class="n">session_class</span><span class="p">(</span><span class="n">data</span><span class="p">)</span>
  307. <span class="k">except</span> <span class="n">BadSignature</span><span class="p">:</span>
  308. <span class="k">return</span> <span class="bp">self</span><span class="o">.</span><span class="n">session_class</span><span class="p">()</span></div>
  309. <div class="viewcode-block" id="SecureCookieSessionInterface.save_session"><a class="viewcode-back" href="../../flask/flask.html#flask.app.SecureCookieSessionInterface.save_session">[docs]</a> <span class="k">def</span> <span class="nf">save_session</span><span class="p">(</span><span class="bp">self</span><span class="p">,</span> <span class="n">app</span><span class="p">,</span> <span class="n">session</span><span class="p">,</span> <span class="n">response</span><span class="p">):</span>
  310. <span class="n">domain</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_cookie_domain</span><span class="p">(</span><span class="n">app</span><span class="p">)</span>
  311. <span class="n">path</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_cookie_path</span><span class="p">(</span><span class="n">app</span><span class="p">)</span>
  312. <span class="c1"># Delete case. If there is no session we bail early.</span>
  313. <span class="c1"># If the session was modified to be empty we remove the</span>
  314. <span class="c1"># whole cookie.</span>
  315. <span class="k">if</span> <span class="ow">not</span> <span class="n">session</span><span class="p">:</span>
  316. <span class="k">if</span> <span class="n">session</span><span class="o">.</span><span class="n">modified</span><span class="p">:</span>
  317. <span class="n">response</span><span class="o">.</span><span class="n">delete_cookie</span><span class="p">(</span><span class="n">app</span><span class="o">.</span><span class="n">session_cookie_name</span><span class="p">,</span>
  318. <span class="n">domain</span><span class="o">=</span><span class="n">domain</span><span class="p">,</span> <span class="n">path</span><span class="o">=</span><span class="n">path</span><span class="p">)</span>
  319. <span class="k">return</span>
  320. <span class="c1"># Modification case. There are upsides and downsides to</span>
  321. <span class="c1"># emitting a set-cookie header each request. The behavior</span>
  322. <span class="c1"># is controlled by the :meth:`should_set_cookie` method</span>
  323. <span class="c1"># which performs a quick check to figure out if the cookie</span>
  324. <span class="c1"># should be set or not. This is controlled by the</span>
  325. <span class="c1"># SESSION_REFRESH_EACH_REQUEST config flag as well as</span>
  326. <span class="c1"># the permanent flag on the session itself.</span>
  327. <span class="k">if</span> <span class="ow">not</span> <span class="bp">self</span><span class="o">.</span><span class="n">should_set_cookie</span><span class="p">(</span><span class="n">app</span><span class="p">,</span> <span class="n">session</span><span class="p">):</span>
  328. <span class="k">return</span>
  329. <span class="n">httponly</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_cookie_httponly</span><span class="p">(</span><span class="n">app</span><span class="p">)</span>
  330. <span class="n">secure</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_cookie_secure</span><span class="p">(</span><span class="n">app</span><span class="p">)</span>
  331. <span class="n">expires</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_expiration_time</span><span class="p">(</span><span class="n">app</span><span class="p">,</span> <span class="n">session</span><span class="p">)</span>
  332. <span class="n">val</span> <span class="o">=</span> <span class="bp">self</span><span class="o">.</span><span class="n">get_signing_serializer</span><span class="p">(</span><span class="n">app</span><span class="p">)</span><span class="o">.</span><span class="n">dumps</span><span class="p">(</span><span class="nb">dict</span><span class="p">(</span><span class="n">session</span><span class="p">))</span>
  333. <span class="n">response</span><span class="o">.</span><span class="n">set_cookie</span><span class="p">(</span><span class="n">app</span><span class="o">.</span><span class="n">session_cookie_name</span><span class="p">,</span> <span class="n">val</span><span class="p">,</span>
  334. <span class="n">expires</span><span class="o">=</span><span class="n">expires</span><span class="p">,</span> <span class="n">httponly</span><span class="o">=</span><span class="n">httponly</span><span class="p">,</span>
  335. <span class="n">domain</span><span class="o">=</span><span class="n">domain</span><span class="p">,</span> <span class="n">path</span><span class="o">=</span><span class="n">path</span><span class="p">,</span> <span class="n">secure</span><span class="o">=</span><span class="n">secure</span><span class="p">)</span></div></div>
  336. </pre></div>
  337. </div>
  338. </div>
  339. </div>
  340. <div class="sphinxsidebar" role="navigation" aria-label="main navigation">
  341. <div class="sphinxsidebarwrapper"><div class="relations">
  342. <h3>Related Topics</h3>
  343. <ul>
  344. <li><a href="../../index.html">Documentation overview</a><ul>
  345. <li><a href="../index.html">Module code</a><ul>
  346. </ul></li>
  347. </ul></li>
  348. </ul>
  349. </div>
  350. <div id="searchbox" style="display: none" role="search">
  351. <h3>Quick search</h3>
  352. <form class="search" action="../../search.html" method="get">
  353. <div><input type="text" name="q" /></div>
  354. <div><input type="submit" value="Go" /></div>
  355. <input type="hidden" name="check_keywords" value="yes" />
  356. <input type="hidden" name="area" value="default" />
  357. </form>
  358. </div>
  359. <script type="text/javascript">$('#searchbox').show(0);</script>
  360. </div>
  361. </div>
  362. <div class="clearer"></div>
  363. </div>
  364. <div class="footer">
  365. &copy;2016, Author.
  366. |
  367. Powered by <a href="http://sphinx-doc.org/">Sphinx 1.4.8</a>
  368. &amp; <a href="https://github.com/bitprophet/alabaster">Alabaster 0.7.9</a>
  369. </div>
  370. </body>
  371. </html>