From bd5984faad97015ac1ec7e6715d2c64ad6b72406 Mon Sep 17 00:00:00 2001 From: VVX7 Date: Wed, 2 Oct 2019 19:10:35 -0400 Subject: [PATCH] chg: [authentication] set session protection to kill session when session identifier does not match --- server.py | 1 + 1 file changed, 1 insertion(+) diff --git a/server.py b/server.py index 573e8d3..5877aca 100755 --- a/server.py +++ b/server.py @@ -66,6 +66,7 @@ users_helper = users_helper.Users_helper(serv_redis_db, cfg) trendings_helper = trendings_helper.Trendings_helper(serv_redis_db, cfg) login_manager = LoginManager(app) +login_manager.session_protection = "strong" login_manager.init_app(app) ##########