Flask-Session has joined the Pallets Community Ecosystem, https://github.com/pallets-eco. Any community member interested in helping maintain this project may contribute by joining the #flask-session channel on https://discord.gg/pallets.
- Add DynamoDB session interface (`[#214](https://github.com/pallets-eco/flask-session/issues/214) <https://github.com/pallets-eco/flask-session/pull/214>`_).
- Add ability to install client libraries for backends using optional dependencies (extras) (`[#228](https://github.com/pallets-eco/flask-session/issues/228) <https://github.com/pallets-eco/flask-session/pull/228>`_).
Fixed
- Include prematurely removed ``cachelib`` dependency. Will be removed in 1.0.0 to be an optional dependency (`[#223](https://github.com/pallets-eco/flask-session/issues/223) <https://github.com/pallets-eco/flask-session/issues/223>`_).
0.7.0 - 2024-03-18
------------------
Changed
</code></pre>
<ul>
<li>Access session interfaces via subfolder, for example <code>flask_session.redis.RedisSessionInterface</code> (<code>2bc7df <https://github.com/pallets-eco/flask-session/commit/2bc7df1be7b8929e55cb25f13845caf0503630d8></code>_).</li>
<li>Deprecate <code>pickle</code> in favor of <code>msgspec</code>, which is configured with <code>SESSION_SERIALIZATION_FORMAT</code> to choose between <code>'json'</code> and <code>'msgpack'</code>. All sessions will convert to msgspec upon first interaction with 0.7.0. Pickle is still available to read existing sessions, but will be removed in 1.0.0. (<code>c7f8ce <https://github.com/pallets-eco/flask-session/commit/c7f8ced0e1532dea87850d34b3328a3fcb769988></code><em>, <code>c7f8ce <https://github.com/pallets-eco/flask-session/commit/c7f8ced0e1532dea87850d34b3328a3fcb769988></code></em>)</li>
<li>Deprecate <code>SESSION_USE_SIGNER</code> (<code>a5dba7 <https://github.com/pallets-eco/flask-session/commit/a5dba7022f806c8fb4412d0428b69dd4a077e4a7></code>_).</li>
<li>Deprecate :class:<code>flask_session.filesystem.FileSystemSessionInterface</code> in favor of the broader :class:<code>flask_session.cachelib.CacheLibSessionInterface</code> (<code>2bc7df <https://github.com/pallets-eco/flask-session/commit/2bc7df1be7b8929e55cb25f13845caf0503630d8></code>_).</li>
</ul>
<p>Added</p>
<pre><code>- Add time-to-live expiration for MongoDB (`9acee3 <https://github.com/pallets-eco/flask-session/commit/9acee3c5fb7072476f3feea923529d19d5e855c3>`_).
- Add retry for SQL based storage (`[#211](https://github.com/pallets-eco/flask-session/issues/211) <https://github.com/pallets-eco/flask-session/pull/211>`_).
- Add ``flask session_cleanup`` command and alternatively, ``SESSION_CLEANUP_N_REQUESTS`` for SQLAlchemy or future non-TTL backends (`[#211](https://github.com/pallets-eco/flask-session/issues/211) <https://github.com/pallets-eco/flask-session/pull/211>`_).
- Add type hints (`7d7d58 <https://github.com/pallets-eco/flask-session/commit/7d7d58ce371553da39095a421445cf639a62bd5f>`_).
- Add logo and additional documentation.
- Add vary cookie header when session modified or accessed as per flask's built-in session (`7ab698 <https://github.com/pallets-eco/flask-session/commit/7ab6980c8ba15912df13dd1e78242803e8104dd6>`_).
- Add regenerate method to session interface to mitigate fixation (`[#27](https://github.com/pallets-eco/flask-session/issues/27) <https://github.com/pallets-eco/flask-session/pull/27>`_, `[#39](https://github.com/pallets-eco/flask-session/issues/39) <https://github.com/pallets-eco/flask-session/issues/39>`_)(`80df63 <https://github.com/pallets-eco/flask-session/commit/80df635ffd466fa7798f6031be5469b4d5dae069>`_).
Removed
</code></pre>
<ul>
<li>Remove null session in favour of relevant exception messages (<code>[#107](https://github.com/pallets-eco/flask-session/issues/107) <https://github.com/pallets-eco/flask-session/issues/107></code><em>, <code>[#182](https://github.com/pallets-eco/flask-session/issues/182) <https://github.com/pallets-eco/flask-session/issues/182></code></em>)(<code>d7ed1c <https://github.com/pallets-eco/flask-session/commit/d7ed1c6e7eb3904888b72f0d6c006db1b9b60795></code>_).</li>
<li>Drop support for Python 3.7 which is end-of-life and precludes use of msgspec (<code>bd7e5b <https://github.com/pallets-eco/flask-session/commit/bd7e5b0bbfc10cdfa9c83b859593c69cc4381571></code>_).</li>
</ul>
<p>Fixed</p>
<pre><code>- Prevent session identifier reuse on storage miss (`[#76](https://github.com/pallets-eco/flask-session/issues/76) <https://github.com/pallets-eco/flask-session/pull/76>`_).
- Abstraction to improve consistency between backends.
- Enforce ``PERMANENT_SESSION_LIFETIME`` as expiration consistently for all backends (`[#81](https://github.com/pallets-eco/flask-session/issues/81) <https://github.com/pallets-eco/flask-session/issues/81>`_)(`86895b <https://github.com/pallets-eco/flask-session/commit/86895b523203ca67c9f87416bdbf028852dcb357>`_).
- Specifically include backend session interfaces in public API and document usage (`[#210](https://github.com/pallets-eco/flask-session/issues/210) <https://github.com/pallets-eco/flask-session/issues/210>`_).
- Fix non-permanent sessions not updating expiry (`[#221](https://github.com/pallets-eco/flask-session/issues/221) <https://github.com/pallets-eco/flask-session/issues/221>`_).
0.6.0 - 2024-01-16
------------------
</tr></table>
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pallets-eco/flask-session/commit/65c05eae0e6d679047394b39a8d6e2bce8195ac3"><code>65c05ea</code></a> Prep release</li>
<li><a href="https://github.com/pallets-eco/flask-session/commit/475cc038376d4d5c2949edf7751a61ed64b7f33c"><code>475cc03</code></a> Merge branch 'erik' into development</li>
<li><a href="https://github.com/pallets-eco/flask-session/commit/1af5cb223bcb4bb556cf8b49e803700ac332ab89"><code>1af5cb2</code></a> Remind the correct PR branch</li>
<li><a href="https://github.com/pallets-eco/flask-session/commit/b7a219bcac97e74276d8e419e6174aea2c4ffdad"><code>b7a219b</code></a> Reduce documentation and remove filesystem extra</li>
<li><a href="https://github.com/pallets-eco/flask-session/commit/6c9a698b61ead380988ba4b69b0f161de47e1886"><code>6c9a698</code></a> Fix docs announcement overflow</li>
<li><a href="https://github.com/pallets-eco/flask-session/commit/f8f5ad15f787c5b30b663f84883ad2c8108b8314"><code>f8f5ad1</code></a> implemented DynamoDBSessionInterface and tests. (<a href="https://redirect.github.com/pallets-eco/flask-session/issues/214">#214</a>)</li>
<li><a href="https://github.com/pallets-eco/flask-session/commit/5a3413b9b1d67a4116404f23022b58326a60fbdf"><code>5a3413b</code></a> Add changelog and contributor</li>
<li><a href="https://github.com/pallets-eco/flask-session/commit/17369528b45d9b5a59003ec006ede35ced40f694"><code>1736952</code></a> Fix docs requirements</li>
<li><a href="https://github.com/pallets-eco/flask-session/commit/a92914ed1196acc2eab4d562996ac944413fb19c"><code>a92914e</code></a> Add docs</li>
<li><a href="https://github.com/pallets-eco/flask-session/commit/ab9a756a18de87033cf6d3b2d86c6dc46e006800"><code>ab9a756</code></a> Tidy up dynamo db, add docker and requirements</li>
<li>Additional commits viewable in <a href="https://github.com/pallets-eco/flask-session/compare/0.4.0...0.8.0">compare view</a></li>
</ul>
</details>
<br />
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=flask-session&package-manager=pip&previous-version=0.4.0&new-version=0.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps flask-session from 0.4.0 to 0.8.0.
Release notes
Sourced from flask-session's releases.
Changelog
Sourced from flask-session's changelog.