Added Redis server-side session config

Author: Systemaker

README.md

@@ -105,6 +105,15 @@ Python Flask WEB API DEMO
 CORS(app, resources={r"/*": {"origins": "http://localhost:3000"}})
 
 
+### REDIS CONFIG FOR SERVER-SIDE SESSION WITH FLASK SESSION :
+- Install, configure and secure Redis in your server : https://redis.io/
+- Add in your config.py file or prod-config.py file :
+import redis
+...
+SESSION_TYPE = 'redis'
+SESSION_REDIS = redis.from_url('127.0.0.1:6379')
+
+
 #### COMMON SQL SCRIPT ON DATABASE FROM MYSQL SERVER :
 - Signin in first with `mysql -u root -p`
 - Create a database : `CREATE DATABASE my_database;`

app/__init__.py

@@ -39,8 +39,9 @@
 csrf = CSRFProtect(app)
 
 # REGISTER SESSION
-Session(app)
-
+# Session(app)
+sess = Session()
+sess.init_app(app)
 
 # REGISTER LOGGING
 logger = logging.getLogger(__name__)

config.py

@@ -3,6 +3,7 @@
 
 # ------- IMPORT DEPENDENCIES ------- 
 import os
+import redis
 from datetime import timedelta
 
 # ------- IMPORT LOCAL DEPENDENCIES -------
@@ -70,12 +71,16 @@ class BaseConfig(object):
 
  SESSION_PERMANENT = False
  # PERMANENT_SESSION_LIFETIME = 5 -> ISSUE : if resized to 5, you'll get csrf_token missing issue
- PERMANENT_SESSION_LIFETIME = timedelta(seconds=120)
+ PERMANENT_SESSION_LIFETIME = timedelta(minutes=5)
 
  # SESSION_TYPE = 'sqlalchemy'
  # SESSION_SQLALCHEMY = None
  # SESSION_SQLALCHEMY_TABLE = 'sessions'
- 
+ 
+ # SESSION_TYPE = 'redis'
+ # SESSION_REDIS = redis.from_url('127.0.0.1:6379')
+
+ # Tod do : fix issue : session file are not removed after the end of the session
  SESSION_TYPE = 'filesystem'
  SESSION_FILE_DIR = 'sessions'
  SESSION_FILE_THRESHOLD = 500

requirements-pip2.txt

@@ -1,12 +1,12 @@
 alembic==0.9.1
 aniso8601==1.2.0
+appdirs==1.4.3
 asn1crypto==0.22.0
 astroid==1.4.9
 Babel==2.4.0
 backports-abc==0.5
 backports.functools-lru-cache==1.3
 backports.ssl-match-hostname==3.5.0.1
-BeautifulSoup==3.2.1
 bleach==2.0.0
 blinker==1.4
 boto==2.45.0
@@ -38,6 +38,7 @@ Flask-SQLAlchemy==2.1
 Flask-Uploads==0.2.1
 Flask-WTF==0.14.2
 geocoder==1.22.4
+gunicorn==19.7.1
 html5lib==0.999999999
 humanize==0.5.1
 idna==2.5
@@ -73,6 +74,7 @@ python-loaders==0.2.3
 python-mimeparse==1.6.0
 pytz==2016.10
 ratelim==0.1.6
+redis==2.10.6
 requests==2.13.0
 sendgrid==3.6.3
 setuptools==28.8.0
@@ -82,13 +84,15 @@ smtpapi==0.3.1
 SQLAlchemy==1.1.5
 stevedore==1.20.0
 tornado==4.4.2
+uWSGI==2.0.15
 virtualenv==15.1.0
 virtualenv-clone==0.2.6
 virtualenvwrapper==4.7.2
 virtualenvwrapper-win==1.2.1
 visitor==0.1.3
 webencodings==0.5.1
 Werkzeug==0.11.15
+wheel==0.29.0
 wrapt==1.10.8
 wtf==0.1
 WTForms==2.1

requirements.txt

@@ -1,12 +1,12 @@
 alembic (0.9.1)
 aniso8601 (1.2.0)
+appdirs (1.4.3)
 asn1crypto (0.22.0)
 astroid (1.4.9)
 Babel (2.4.0)
 backports-abc (0.5)
 backports.functools-lru-cache (1.3)
 backports.ssl-match-hostname (3.5.0.1)
-BeautifulSoup (3.2.1)
 bleach (2.0.0)
 blinker (1.4)
 boto (2.45.0)
@@ -38,6 +38,7 @@ Flask-SQLAlchemy (2.1)
 Flask-Uploads (0.2.1)
 Flask-WTF (0.14.2)
 geocoder (1.22.4)
+gunicorn (19.7.1)
 html5lib (0.999999999)
 humanize (0.5.1)
 idna (2.5)
@@ -73,6 +74,7 @@ python-loaders (0.2.3)
 python-mimeparse (1.6.0)
 pytz (2016.10)
 ratelim (0.1.6)
+redis (2.10.6)
 requests (2.13.0)
 sendgrid (3.6.3)
 setuptools (28.8.0)
@@ -82,13 +84,15 @@ smtpapi (0.3.1)
 SQLAlchemy (1.1.5)
 stevedore (1.20.0)
 tornado (4.4.2)
+uWSGI (2.0.15)
 virtualenv (15.1.0)
 virtualenv-clone (0.2.6)
 virtualenvwrapper (4.7.2)
 virtualenvwrapper-win (1.2.1)
 visitor (0.1.3)
 webencodings (0.5.1)
 Werkzeug (0.11.15)
+wheel (0.29.0)
 wrapt (1.10.8)
 wtf (0.1)
 WTForms (2.1)