Sessions or storing user data between requests

Sometimes you'll have a scenario in your application where data has to be kept between requests, but there is no need to persist it in the database, like an authentication token that identifies a logged user or which items a user added to his shopping cart. At those times of peril, use Flask sessions.

Flask sessions are a solution for transient storage between requests implemented using browser cookies and cryptography. Flask uses the secret key value to encrypt any values you set in the session before setting it in the cookies; this way, even if a malicious person has access to the victim's browser, it won't be possible to read the cookie's content.

Tip

Because the secret key is used to encrypt the session data, it is important to have a strong value for your secret key. os.urandom(24) will likely create a strong secret key for the deploy environment.

The data stored in the session is transient because there is no guarantee it will be there at...