chg: [authentication] set session protection to kill session when session identifier does not match

2019-10-02 19:10:35 -04:00 · 2019-10-02 19:10:35 -04:00 · bd5984faad
parent 9c028e697f
commit bd5984faad
1 changed files with 1 additions and 0 deletions
--- a/server.py
+++ b/server.py
@ -66,6 +66,7 @@ users_helper = users_helper.Users_helper(serv_redis_db, cfg)
 trendings_helper = trendings_helper.Trendings_helper(serv_redis_db, cfg)

 login_manager = LoginManager(app)
+login_manager.session_protection = "strong"
 login_manager.init_app(app)

 ##########