Files
quart-session/CHANGELOG.md
T
daniel156161 4939bbe987
Build & Publish Package / publish (push) Successful in 49s
feat(redis): add native JSON session storage for 4.1.0
- Add opt-in SESSION_REDIS_JSON storage for asyncio Redis backends.
- Check JSON command support at startup and reject JSON mode on Trio.
- Read legacy strings and migrate sessions on their next save.
- Validate JSON objects before transactional replacement and expiry.
- Preserve tagged serialization for datetime, tuple, and other types.
- Cover command contracts, error handling, and session round-trips.
- Document server requirements, permissions, and migration limits.
- Normalize indentation and whitespace across code, tests, and examples.
- Bump the package and lockfile to 4.1.0 and update the changelog.
- Refresh the locked pycparser dependency to 3.12.
2026-10-23 20:26:24 +02:00

2.2 KiB

4.1.0

  • Add opt-in native JSON session storage for Redis/Valkey via SESSION_REDIS_JSON.
  • Read existing string sessions and migrate them to native JSON on their next save.
  • Validate JSON command support at startup and apply session expiry transactionally.

4.0.0

  • Breaking: require Python 3.15 or newer (requires-python = ">=3.15", classifier, .python-version).
  • Fix AttributeError: 'str' object has no attribute 'decode' in save_session() when SESSION_USE_SIGNER is disabled (the default), which made every request fail with a 500.
  • save_session() no longer crashes when no secret_key is set while SESSION_USE_SIGNER is enabled; it now logs a warning and skips the cookie, like open_session() does.
  • Add a pytest suite covering the session cookie round-trip.
  • quart_session.__version__ is now read from the installed package metadata instead of a hardcoded string (it had drifted to 3.0.0 while the release was 3.0.2).

3.0.2

  • Add package metadata for Gitea PyPI registry publishing.
  • Add Gitea workflow for tagged package releases.
  • Add explicit redis-trio extra for the bundled Trio Redis client.

2.1.0

  • session_cookie_name fix

2.0.0

  • Move from aioredis to redis

1.0.7

  • Updated memcached support (removed asyncio.loop, removed coroutine decorator)

1.0.6

  • MongoDB support
  • Transfer copyright to Kroket Ltd.

1.0.3 2021-08-31

1.0.0 2020-01-15

  • Added support for arbitrary usage of caching backends.
    • Exposed get, set, delete on the session interface for direct usage.
  • Renamed SESSION_HIJACK_REVERSE_PROXY to SESSION_REVERSE_PROXY.
  • Renamed SESSION_HIJACK_PROTECTION to SESSION_PROTECTION.
  • Removed fallback when X-Forwarded-For is not present whilst USING SESSION_REVERSE_PROXY, emit error instead.
  • Fixed a bug where session timeouts would default to 600 seconds.
  • Deprecated/disabled the dirty() method.

0.0.1 2020-01-04

  • Released initial pre alpha version.