daniel156161
4939bbe987
Build & Publish Package / publish (push) Successful in 49s
- Add opt-in SESSION_REDIS_JSON storage for asyncio Redis backends. - Check JSON command support at startup and reject JSON mode on Trio. - Read legacy strings and migrate sessions on their next save. - Validate JSON objects before transactional replacement and expiry. - Preserve tagged serialization for datetime, tuple, and other types. - Cover command contracts, error handling, and session round-trips. - Document server requirements, permissions, and migration limits. - Normalize indentation and whitespace across code, tests, and examples. - Bump the package and lockfile to 4.1.0 and update the changelog. - Refresh the locked pycparser dependency to 3.12.
60 lines
2.2 KiB
Markdown
60 lines
2.2 KiB
Markdown
### 4.1.0
|
|
|
|
- Add opt-in native JSON session storage for Redis/Valkey via `SESSION_REDIS_JSON`.
|
|
- Read existing string sessions and migrate them to native JSON on their next save.
|
|
- Validate JSON command support at startup and apply session expiry transactionally.
|
|
|
|
### 4.0.0
|
|
|
|
- **Breaking:** require Python 3.15 or newer (`requires-python = ">=3.15"`, classifier, `.python-version`).
|
|
- Fix `AttributeError: 'str' object has no attribute 'decode'` in `save_session()` when
|
|
`SESSION_USE_SIGNER` is disabled (the default), which made every request fail with a 500.
|
|
- `save_session()` no longer crashes when no `secret_key` is set while `SESSION_USE_SIGNER`
|
|
is enabled; it now logs a warning and skips the cookie, like `open_session()` does.
|
|
- Add a pytest suite covering the session cookie round-trip.
|
|
- `quart_session.__version__` is now read from the installed package metadata
|
|
instead of a hardcoded string (it had drifted to `3.0.0` while the release was `3.0.2`).
|
|
|
|
### 3.0.2
|
|
|
|
- Add package metadata for Gitea PyPI registry publishing.
|
|
- Add Gitea workflow for tagged package releases.
|
|
- Add explicit redis-trio extra for the bundled Trio Redis client.
|
|
|
|
### 2.1.0
|
|
|
|
- `session_cookie_name` fix
|
|
|
|
### 2.0.0
|
|
|
|
- Move from aioredis to redis
|
|
|
|
### 1.0.7
|
|
|
|
- Updated memcached support (removed asyncio.loop, removed coroutine decorator)
|
|
|
|
### 1.0.6
|
|
|
|
- MongoDB support
|
|
- Transfer copyright to Kroket Ltd.
|
|
|
|
### 1.0.3 2021-08-31
|
|
|
|
- Migrated to aioredis 2
|
|
- SameSite support https://github.com/kroketio/quart-session/commit/8daae3a6734e8f7da13954d5a1a5da8f5fc5a49a
|
|
- Memcached stuff https://github.com/filak/quart-session/commit/004871c495a069784e57e604b69f65af1b7e645a
|
|
|
|
### 1.0.0 2020-01-15
|
|
|
|
- Added support for arbitrary usage of caching backends.
|
|
- Exposed `get`, `set`, `delete` on the session interface for direct usage.
|
|
- Renamed `SESSION_HIJACK_REVERSE_PROXY` to `SESSION_REVERSE_PROXY`.
|
|
- Renamed `SESSION_HIJACK_PROTECTION` to `SESSION_PROTECTION`.
|
|
- Removed fallback when `X-Forwarded-For` is not present whilst USING `SESSION_REVERSE_PROXY`, emit error instead.
|
|
- Fixed a bug where session timeouts would default to 600 seconds.
|
|
- Deprecated/disabled the `dirty()` method.
|
|
|
|
### 0.0.1 2020-01-04
|
|
|
|
- Released initial pre alpha version.
|