Skip to content

Regenerate session IDs after authentication - #1

Open
g105b wants to merge 1 commit into
masterfrom
fix/rotate-session-after-authentication
Open

g105b wants to merge 1 commit into
masterfrom
fix/rotate-session-after-authentication

Conversation

@g105b

@g105b g105b commented Nov 5, 2026

Copy link
Copy Markdown
Member

Regenerate session IDs before saving authenticated users across Flask, Django, FastAPI, WSGI and ASGI. Invalidate old sessions and preserve other data. Custom containers need regeneration and custom stores need a delete method.

Add regression tests for old cookies, response replay and rotation failures. All 89 tests pass.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant