Flask session object - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the Flask session object used for?

The Flask session object stores data specific to a user across requests. It keeps information like login status or preferences while the user browses the site.

intermediate

How does Flask keep session data secure?

Flask signs the session data with a secret key to prevent tampering. This means users cannot change the session data without the server noticing.

beginner

How do you store a value in the Flask session?

You assign a value like a dictionary:
session['key'] = 'value'. This saves the value under 'key' for the current user session.

beginner

What must you set in your Flask app to use sessions?

You must set app.secret_key to a secret string. This key signs the session cookies to keep them secure.

intermediate

What happens if you don’t set a secret key in Flask but try to use sessions?

Flask will raise an error because it cannot securely sign the session cookie. The secret key is required to protect session data.

What type of data structure is the Flask session object similar to?

A Set

B List

C Tuple

D Dictionary

The Flask session object behaves like a dictionary where you store key-value pairs.

Which Flask setting is essential for session security?

A app.secret_key

B app.debug

C app.static_folder

D app.config['SESSION_TYPE']

The secret_key is used to sign session cookies and keep them secure.

Where is Flask session data stored by default?

A In a file on the server

B In a server database

C In a client-side cookie

D In memory on the server

By default, Flask stores session data in a signed cookie on the client side.

How do you remove a key from the Flask session?

A Both A and B

B del session['key']

C session.remove('key')

D session.pop('key')

You can remove a key using either session.pop('key') or del session['key'].

What happens if a user tampers with the Flask session cookie?

A Flask ignores the tampered data

B Flask raises a security error

C Flask accepts the changes

D Flask resets the session silently

Flask detects tampering because the cookie signature won't match and raises an error.

Explain how Flask sessions help keep user data across multiple page visits.

Think about how websites remember you when you move between pages.

Describe the steps to securely use the Flask session object in an app.

Consider what you need to do before and after using session data.

Practice

1. What is the main purpose of the Flask session object?

easy

A. To store user-specific data temporarily between requests

B. To connect to a database

C. To handle file uploads

D. To render HTML templates

Solution

1. Step 1: Understand the role of session in Flask

   The session object is designed to keep data for a user during their visit, like a temporary storage.

2. Step 2: Compare with other options

   Connecting to databases, handling uploads, and rendering templates are done by other Flask features, not session.

3. Final Answer:

   To store user-specific data temporarily between requests -> Option A

4. Quick Check:

   Session stores user data temporarily [OK]

Hint: Session stores data per user visit like a temporary box [OK]

Common Mistakes:

• Thinking session connects to databases
• Confusing session with template rendering
• Assuming session handles file uploads

2. Which of the following is the correct way to import and use the Flask session object?

easy

A. import flask.session

flask.session['user'] = 'Alice'

B. from flask_session import Session

Session['user'] = 'Alice'

C. from flask import session

session['user'] = 'Alice'

D. import session

session['user'] = 'Alice'

Solution

1. Step 1: Check the correct import statement

   The Flask session object is imported directly from flask using from flask import session.

2. Step 2: Verify usage syntax

   After import, you can use it like a dictionary: session['user'] = 'Alice'.

3. Final Answer:

   from flask import session\nsession['user'] = 'Alice' -> Option C

4. Quick Check:

   Import session from flask and assign like dict [OK]

Hint: Import session directly from flask, then use like a dict [OK]

Common Mistakes:

• Trying to import session from flask_session package
• Using wrong import syntax like import session
• Accessing session as flask.session instead of from flask import session

3. What will be the output of this Flask route code snippet?

from flask import Flask, session
app = Flask(__name__)
app.secret_key = 'secret'

@app.route('/')
def index():
    session['count'] = session.get('count', 0) + 1
    return f"Count: {session['count']}"

medium

A. Count: 1

B. Error: session not defined

C. Count: 2

D. Count: 0

Solution

1. Step 1: Understand session initialization and increment

   The code gets 'count' from session or 0 if not set, then adds 1 and stores it back.

2. Step 2: Determine output on first request

   On first visit, 'count' is not in session, so session.get('count', 0) returns 0, then incremented to 1.

3. Final Answer:

   Count: 1 -> Option A

4. Quick Check:

   First visit count starts at 1 [OK]

Hint: First session count starts at 1 after increment [OK]

Common Mistakes:

• Assuming count starts at 0 output
• Expecting count to be 2 on first visit
• Forgetting to set secret_key causing errors

4. Identify the error in this Flask code using session:

from flask import Flask, session
app = Flask(__name__)

@app.route('/')
def index():
    session['user'] = 'Bob'
    return f"User: {session['user']}"

medium

A. Missing import of session

B. Missing app.secret_key causing session error

C. Incorrect session syntax

D. Route decorator syntax error

Solution

1. Step 1: Check for secret_key setting

   Flask sessions require app.secret_key to encrypt session data securely.

2. Step 2: Identify missing secret_key

   The code does not set app.secret_key, so session will raise an error or not work properly.

3. Final Answer:

   Missing app.secret_key causing session error -> Option B

4. Quick Check:

   Secret key missing breaks session [OK]

Hint: Always set app.secret_key before using session [OK]

Common Mistakes:

• Forgetting to set secret_key
• Assuming session works without secret_key
• Misreading import or decorator syntax

5. You want to store a user's preferred language in the Flask session and ensure it persists across requests. Which code snippet correctly sets and retrieves this value safely?

hard

A. session['lang'] = 'en'
lang = session['language']

B. session['lang'] = 'en'
lang = session['lang']

C. session.set('lang', 'en')
lang = session.get('lang')

D. session['lang'] = 'en'
lang = session.get('lang', 'default')

Solution

1. Step 1: Set session value correctly

   Assigning with session['lang'] = 'en' is correct to store the language.

2. Step 2: Retrieve session value safely

   Using session.get('lang', 'default') safely gets the value or returns 'default' if missing, avoiding errors.

3. Final Answer:

   session['lang'] = 'en'\nlang = session.get('lang', 'default') -> Option D

4. Quick Check:

   Use session.get() to avoid KeyError [OK]

Hint: Use session.get() to safely read session keys [OK]

Common Mistakes:

• Using session.set() which does not exist
• Accessing wrong key causing KeyError
• Not providing default value when reading session