summaryrefslogtreecommitdiff
path: root/docs/api/session.rst
AgeCommit message (Collapse)Author
2018-11-03change to use JSONSerializer for SignedCookieSessionFactoryMichael Merickel
2018-09-16deprecate signed_serialize and signed_deserializeMichael Merickel
2018-09-16deprecate pickleable sessions, recommend jsonMichael Merickel
2017-04-12Create a new ICSRF implementation for getting CSRF tokens, split out from ↵Matthew Wilkes
the session machinery. Adds configuration of this to the csrf_options configurator commands. Make the default implementation a fallback to the old one. Documentation patches for new best practices given updates CSRF implementation.
2016-04-16In addition to CSRF token, verify the origin tooDonald Stufft
Add an additional layer of protection against CSRF by verifying the actual origin of the request in addition to the CSRF token. We only do this check on sites hosted behind HTTPS because only HTTPS sites have evidence to show that the Referrer header is not being spuriously removed by random middleware boxes.
2015-11-23expose the PickleSerializerMichael Merickel
2013-10-19update the docsMichael Merickel
2012-09-19add check_csrf convenience functionChris McDonough
2010-11-02Insecure -> UnencryptedChris McDonough
2010-10-29- New API methods in ``pyramid.session``: ``signed_serialize`` andChris McDonough
``signed_deserialize``.
2010-10-28sessioning docsChris McDonough