Session data storage in Flask

Introduction

Session data storage lets a website remember who you are while you browse. It keeps your info safe between pages without asking you again.

When you want to keep a user logged in as they move through pages.

To save items in a shopping cart before checkout.

To remember user preferences like language or theme during a visit.

When you need to store temporary data that should disappear after the browser closes.

Syntax

Flask

from flask import Flask, session

app = Flask(__name__)
app.secret_key = 'your_secret_key'

@app.route('/')
def index():
    session['key'] = 'value'
    return 'Session data saved!'

@app.route('/get')
def get_session():
    return session.get('key', 'No data')

You must set app.secret_key to keep session data secure.

Use session['key'] = value to save data and session.get('key') to read it.

Examples

Saves the username 'Alice' in the session.

Flask

session['username'] = 'Alice'

Reads the username from session or returns 'Guest' if not set.

Flask

user = session.get('username', 'Guest')

Removes the username from session safely.

Flask

session.pop('username', None)

Sample Program

This Flask app lets users log in by saving their username in session data. The homepage shows if they are logged in or not. Logging out removes the username from the session.

Flask

from flask import Flask, session, redirect, url_for, request

app = Flask(__name__)
app.secret_key = 'supersecretkey'

@app.route('/')
def index():
    if 'username' in session:
        return f"Logged in as {session['username']}"
    return 'You are not logged in'

@app.route('/login', methods=['POST'])
def login():
    username = request.form['username']
    session['username'] = username
    return redirect(url_for('index'))

@app.route('/logout')
def logout():
    session.pop('username', None)
    return redirect(url_for('index'))

Important Notes

Session data is stored client-side in a signed cookie on the user's browser.

Never store sensitive info like passwords directly in session.

Session data lasts until the browser closes or the session is cleared.

Summary

Session storage keeps user info between pages safely.

Set app.secret_key to enable sessions in Flask.

Use session['key'] to save and session.get('key') to read data.

Practice

1. What is the main purpose of using session data storage in a Flask web application?

easy

A. To permanently save data on the server's hard drive

B. To keep user information between different pages securely

C. To speed up the loading of static files like images

D. To replace cookies with a faster alternative

Solution

1. Step 1: Understand session data role

   Session data stores user info temporarily during their visit to keep state across pages.

2. Step 2: Differentiate from other storage

   It is not permanent storage or related to static files; it keeps data safe between requests.

3. Final Answer:

   To keep user information between different pages securely -> Option B

4. Quick Check:

   Session stores user info between pages = A [OK]

Hint: Sessions keep user info across pages safely [OK]

Common Mistakes:

• Confusing session with permanent database storage
• Thinking session speeds up static file loading
• Believing session replaces cookies entirely

2. Which line of code correctly sets the secret key needed for Flask sessions?

easy

A. app.set_secret('mysecret')

B. session.secret = 'mysecret'

C. app.secret_key = 'mysecret'

D. app.session_key = 'mysecret'

Solution

1. Step 1: Recall Flask session setup

   Flask requires setting app.secret_key to enable session encryption.

2. Step 2: Check syntax correctness

   Only app.secret_key = 'mysecret' is valid; others are invalid method or attribute names.

3. Final Answer:

   app.secret_key = 'mysecret' -> Option C

4. Quick Check:

   Set secret_key with app.secret_key = value [OK]

Hint: Use app.secret_key to enable sessions [OK]

Common Mistakes:

• Using wrong attribute like app.session_key
• Trying to call a non-existent method set_secret
• Assigning secret to session object instead of app

3. Given this Flask code snippet:

from flask import Flask, session
app = Flask(__name__)
app.secret_key = 'key'

@app.route('/')
def index():
    session['count'] = session.get('count', 0) + 1
    return str(session['count'])

What will the user see on their first visit to the '/' route?

medium

A. 0

B. Error

C. None

D. 1

Solution

1. Step 1: Analyze session count initialization

   On first visit, session.get('count', 0) returns 0, then adds 1, so count becomes 1.

2. Step 2: Understand return value

   The function returns the string of session['count'], which is '1'.

3. Final Answer:

   1 -> Option D

4. Quick Check:

   First visit count = 1 [OK]

Hint: session.get with default 0 then add 1 means first count is 1 [OK]

Common Mistakes:

• Thinking count starts at 0 instead of 1
• Expecting None because key is missing
• Assuming code causes an error without secret_key

4. What is wrong with this Flask code snippet for storing session data?

from flask import Flask, session
app = Flask(__name__)

@app.route('/')
def index():
    session['user'] = 'Alice'
    return session['user']

medium

A. Missing app.secret_key setup

B. session['user'] cannot store strings

C. Flask app must import request to use session

D. Route decorator syntax is incorrect

Solution

1. Step 1: Check session requirements

   Flask sessions require app.secret_key to be set for security.

2. Step 2: Identify missing secret_key

   The code does not set app.secret_key, so session will not work properly.

3. Final Answer:

   Missing app.secret_key setup -> Option A

4. Quick Check:

   Sessions need app.secret_key set [OK]

Hint: Always set app.secret_key before using session [OK]

Common Mistakes:

• Thinking session can't store strings
• Believing request import is needed for session
• Assuming route decorator syntax is wrong

5. You want to store a user's preferred language in the session and retrieve it safely. Which code snippet correctly sets and reads this value in Flask?

hard

A. session['lang'] = 'en'
language = session.get('lang', 'default')

B. session.set('lang', 'en')
language = session.get('lang')

C. session['lang'] = 'en'
language = session['lang']

D. session['lang'] = 'en'
language = session['language']

Solution

1. Step 1: Correctly set session key

   Assigning with session['lang'] = 'en' is correct to store the language.

2. Step 2: Safely retrieve session value

   Using session.get('lang', 'default') safely reads the value with a fallback if missing.

3. Final Answer:

   session['lang'] = 'en'\nlanguage = session.get('lang', 'default') -> Option A

4. Quick Check:

   Use session.get to safely read session keys [OK]

Hint: Use session.get('key', default) to avoid errors [OK]

Common Mistakes:

• Using session.set which does not exist
• Accessing wrong key name on read
• Not providing default causing KeyError