Flask session object - Step-by-Step Execution

Concept Flow - Flask session object

Client sends request

↓

Flask receives request

↓

Load session data from cookie

↓

Access/Modify session object in view

↓

Process request and prepare response

↓

Save session data to cookie

↓

Send response back to client

This flow shows how Flask loads session data from the client's cookie, lets the app read or change it, then saves it back in the response cookie.

Execution Sample

Flask

from flask import Flask, session
app = Flask(__name__)
app.secret_key = 'secret'

@app.route('/')
def index():
    session['count'] = session.get('count', 0) + 1
    return f"Count: {session['count']}"

This code counts how many times a user visits the page by storing a number in the session.

Execution Table

Step	Request Count	Session Before	Action	Session After	Response Output
1	First visit	{}	session.get('count', 0) + 1 = 1	{'count': 1}	Count: 1
2	Second visit	{'count': 1}	session.get('count', 0) + 1 = 2	{'count': 2}	Count: 2
3	Third visit	{'count': 2}	session.get('count', 0) + 1 = 3	{'count': 3}	Count: 3
4	Fourth visit	{'count': 3}	session.get('count', 0) + 1 = 4	{'count': 4}	Count: 4
5	Fifth visit	{'count': 4}	session.get('count', 0) + 1 = 5	{'count': 5}	Count: 5

💡 Session count increments on each visit; no exit condition as server keeps updating session.

Variable Tracker

Variable	Start	After 1	After 2	After 3	After 4	After 5
session['count']	undefined	1	2	3	4	5

Key Moments - 3 Insights

Why does session['count'] start as undefined on the first visit?

Because the session cookie is empty on the first visit, so session.get('count', 0) returns 0, then we add 1 (see execution_table step 1).

How does Flask remember the session data between visits?

Flask stores session data in a secure cookie sent to the client. On each request, Flask reads this cookie to restore the session (see concept_flow step 'Load session data from cookie').

What happens if we don't set app.secret_key?

Flask cannot securely sign the session cookie, so session data won't be saved properly. The session will appear empty every time (not shown in execution_table but important).

Visual Quiz - 3 Questions

Look at the execution_table, what is session['count'] after the third visit?

A 2

B 3

C undefined

D 4

💡 Hint

Check the 'Session After' column at step 3 in the execution_table.

At which step does the session first contain {'count': 1}?

A Step 1

B Step 2

C Step 3

D Step 0

💡 Hint

Look at the 'Session After' column in the execution_table for step 1.

If app.secret_key is missing, how would the session behave?

A Session would throw an error on access

B Session data would increment normally

C Session data would not persist between requests

D Session would store data on the server

💡 Hint

Refer to key_moments about secret_key importance.

Concept Snapshot

Flask session object stores user data between requests.
It uses a secure cookie to save session data.
Access session like a dictionary: session['key'] = value.
Set app.secret_key to enable session security.
Session data persists across page visits.
Use session.get('key', default) to avoid errors.

Full Transcript

The Flask session object lets you save small pieces of data for each user between their visits. When a user sends a request, Flask reads the session data from a cookie. You can read or change this session data in your view functions like a dictionary. After processing, Flask saves the updated session back into a cookie sent to the user. This example counts how many times a user visits a page by increasing a number stored in the session. The session starts empty on the first visit, so the count begins at 1. Each new visit reads the previous count, adds one, and saves it again. Remember to set app.secret_key so Flask can securely sign the session cookie. Without it, session data won't persist. This flow helps keep track of user-specific info without needing a database.

Practice

1. What is the main purpose of the Flask session object?

easy

A. To store user-specific data temporarily between requests

B. To connect to a database

C. To handle file uploads

D. To render HTML templates

Solution

1. Step 1: Understand the role of session in Flask

   The session object is designed to keep data for a user during their visit, like a temporary storage.

2. Step 2: Compare with other options

   Connecting to databases, handling uploads, and rendering templates are done by other Flask features, not session.

3. Final Answer:

   To store user-specific data temporarily between requests -> Option A

4. Quick Check:

   Session stores user data temporarily [OK]

Hint: Session stores data per user visit like a temporary box [OK]

Common Mistakes:

• Thinking session connects to databases
• Confusing session with template rendering
• Assuming session handles file uploads

2. Which of the following is the correct way to import and use the Flask session object?

easy

A. import flask.session

flask.session['user'] = 'Alice'

B. from flask_session import Session

Session['user'] = 'Alice'

C. from flask import session

session['user'] = 'Alice'

D. import session

session['user'] = 'Alice'

Solution

1. Step 1: Check the correct import statement

   The Flask session object is imported directly from flask using from flask import session.

2. Step 2: Verify usage syntax

   After import, you can use it like a dictionary: session['user'] = 'Alice'.

3. Final Answer:

   from flask import session\nsession['user'] = 'Alice' -> Option C

4. Quick Check:

   Import session from flask and assign like dict [OK]

Hint: Import session directly from flask, then use like a dict [OK]

Common Mistakes:

• Trying to import session from flask_session package
• Using wrong import syntax like import session
• Accessing session as flask.session instead of from flask import session

3. What will be the output of this Flask route code snippet?

from flask import Flask, session
app = Flask(__name__)
app.secret_key = 'secret'

@app.route('/')
def index():
    session['count'] = session.get('count', 0) + 1
    return f"Count: {session['count']}"

medium

A. Count: 1

B. Error: session not defined

C. Count: 2

D. Count: 0

Solution

1. Step 1: Understand session initialization and increment

   The code gets 'count' from session or 0 if not set, then adds 1 and stores it back.

2. Step 2: Determine output on first request

   On first visit, 'count' is not in session, so session.get('count', 0) returns 0, then incremented to 1.

3. Final Answer:

   Count: 1 -> Option A

4. Quick Check:

   First visit count starts at 1 [OK]

Hint: First session count starts at 1 after increment [OK]

Common Mistakes:

• Assuming count starts at 0 output
• Expecting count to be 2 on first visit
• Forgetting to set secret_key causing errors

4. Identify the error in this Flask code using session:

from flask import Flask, session
app = Flask(__name__)

@app.route('/')
def index():
    session['user'] = 'Bob'
    return f"User: {session['user']}"

medium

A. Missing import of session

B. Missing app.secret_key causing session error

C. Incorrect session syntax

D. Route decorator syntax error

Solution

1. Step 1: Check for secret_key setting

   Flask sessions require app.secret_key to encrypt session data securely.

2. Step 2: Identify missing secret_key

   The code does not set app.secret_key, so session will raise an error or not work properly.

3. Final Answer:

   Missing app.secret_key causing session error -> Option B

4. Quick Check:

   Secret key missing breaks session [OK]

Hint: Always set app.secret_key before using session [OK]

Common Mistakes:

• Forgetting to set secret_key
• Assuming session works without secret_key
• Misreading import or decorator syntax

5. You want to store a user's preferred language in the Flask session and ensure it persists across requests. Which code snippet correctly sets and retrieves this value safely?

hard

A. session['lang'] = 'en'
lang = session['language']

B. session['lang'] = 'en'
lang = session['lang']

C. session.set('lang', 'en')
lang = session.get('lang')

D. session['lang'] = 'en'
lang = session.get('lang', 'default')

Solution

1. Step 1: Set session value correctly

   Assigning with session['lang'] = 'en' is correct to store the language.

2. Step 2: Retrieve session value safely

   Using session.get('lang', 'default') safely gets the value or returns 'default' if missing, avoiding errors.

3. Final Answer:

   session['lang'] = 'en'\nlang = session.get('lang', 'default') -> Option D

4. Quick Check:

   Use session.get() to avoid KeyError [OK]

Hint: Use session.get() to safely read session keys [OK]

Common Mistakes:

• Using session.set() which does not exist
• Accessing wrong key causing KeyError
• Not providing default value when reading session