daniel156161/quart-session
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
46 Commits 5 Branches 4 Tags
5dc4a8f6cb12c7b3b9cd731a2be3bb979b9e57e7
Commit Graph
14 Commits
Author SHA1 Message Date
daniel156161 5dc4a8f6cb feat!: require Python 3.15 and fix unsigned session cookies
Build & Publish Package / publish (push) Successful in 46s
Details 
BREAKING CHANGE: the minimum supported Python version is now 3.15.

Python 3.15:

- Raise requires-python from >=3.13 to >=3.15.
- Replace the 3.13 trove classifier with 3.15.
- Pin the toolchain via a .python-version file.
- Pin setup-uv to Python 3.15 in the publish workflow.
- Correct the stale "Python 3.7.0 or higher" claim in the README.
- Verified against CPython 3.15.0; all extras resolve to 3.15 wheels.

Session cookie fixes:

- Fix save_session() crashing with AttributeError on every request.
- The str sid was decoded as bytes when SESSION_USE_SIGNER is off.
- That is the default, so it broke the stock configuration.
- Only decode in the signer branch, where sign() actually returns bytes.
- Handle a missing secret_key instead of calling sign() on None.
- A missing signer now warns and skips the cookie, like open_session().
- Both bugs predate this release and affect all Python 3 versions.

Tests:

- Add a pytest suite; the project previously had no tests at all.
- Cover the cookie round-trip for both signed and unsigned sessions.
- Cover session state surviving a follow-up request.
- Cover the missing secret_key path.
- Three of the five tests fail without the save_session() fix.
- Add pytest and pytest-asyncio to the dev dependency group.
- Enable asyncio_mode = "auto" so tests need no per-test markers.

Version:

- Bump the package version to 4.0.0.
- Derive __version__ from installed package metadata.
- It was hardcoded and had drifted to 3.0.0 while the release was 3.0.2.
- pyproject.toml is now the single source of truth for the version.
- Commit uv.lock to pin the development environment.
 2026-10-21 16:40:59 +02:00
Kroket Ltd 249a7abd89 Bump to 3.0.0 2023-11-24 04:12:03 +02:00
Kroket Ltd 9186fae9e7 bump version to 2.1.0 2023-10-17 01:41:24 +03:00
Sander 6ad2a3789d Update CHANGELOG, bump version 2023-01-16 19:31:09 +02:00
Kroket Ltd 2f53caa654 Bump version 2022-11-24 17:14:14 +01:00
Kroket Ltd 3e6b102b34 Transfer copyright, bump version 2022-11-13 03:36:15 +02:00
Kyle Smith b9f2dc0067 add session handler for mongodb: MongoDBSessionInterface 2022-03-17 15:51:45 -04:00
Sander 53a82fda3f Bump version 2022-03-10 15:00:32 +02:00
sander 38bf10d3d2 Bump version to 1.0.3 2021-08-31 22:41:47 +02:00
Sander 6d9ebbb264 Correctly bump version 2020-12-09 15:39:42 +01:00
Sander e136ab0101 Actually implement a working NullSessionInterface, fixes pgjones/quart#105, bump version 2020-12-09 15:39:42 +01:00
Sander 51668878df Release 1.0.0 
- Added support for arbitrary usage of caching backends.
    - Exposed `get`, `set`, `delete` on the session interface for direct usage.
- Renamed `SESSION_HIJACK_REVERSE_PROXY` to `SESSION_REVERSE_PROXY`.
- Renamed `SESSION_HIJACK_PROTECTION` to `SESSION_PROTECTION`.
- Removed fallback when `X-Forwarded-For` is not present whilst USING `SESSION_REVERSE_PROXY`, emit error instead.
- Fixed a bug where session timeouts would default to 600 seconds.
- Deprecated/disabled the `dirty()` method.
 2020-12-09 15:39:42 +01:00
Sander 0f9ba5052c Redis+Trio support 2020-12-09 15:39:42 +01:00
Sander fb5678afbb Initial commit 2020-12-09 15:39:42 +01:00