session collision fix
frdel committed
Jul 2, 2025 at 14:16 UTC
2fbba0d7947afa3a54e2b7c1707d5da35722e0da
1 file changed
+4
run_ui.py
+4
@@ -1,3 +1,4 @@
1
+from datetime import timedelta
2
import os
3
import secrets
4
import sys
@@ -29,7 +30,10 @@ webapp = Flask("app", static_folder=get_abs_path("./webui"), static_url_path="/"
30
webapp.secret_key = os.getenv("FLASK_SECRET_KEY") or secrets.token_hex(32)
31
webapp.config.update(
32
JSON_SORT_KEYS=False,
33
+ SESSION_COOKIE_NAME="session_" + secrets.token_hex(8), # randomize the session cookie name to prevent session collision on same host
34
SESSION_COOKIE_SAMESITE="Strict",
35
+ SESSION_PERMANENT=True,
36
+ PERMANENT_SESSION_LIFETIME=timedelta(days=7)
37
)
38
39