Session data storage in Flask - Mini Project: Build & Apply

Session Data Storage with Flask

📖 Scenario: You are building a simple web app using Flask. You want to remember a user's name during their visit without asking every time. This is like remembering a friend's name when they come to your house.

🎯 Goal: Create a Flask app that stores a user's name in session data and shows it on the homepage.

📋 What You'll Learn

Create a Flask app instance

Set a secret key for sessions

Store a user's name in the session

Retrieve and display the stored name on the homepage

💡 Why This Matters

🌍 Real World

Web apps often need to remember users during their visit without asking repeatedly. Session data storage helps keep user info like login status or preferences.

💼 Career

Understanding session management is key for backend web developers to create personalized and secure user experiences.

1

Create Flask app and set secret key

Write code to import Flask and session from flask. Then create a Flask app instance called app. Finally, set the secret key of app to the string 'mysecretkey'.

Flask

from flask import Flask, session

# Your code here

Hint

The secret key is needed to keep session data safe. Use app.secret_key = 'mysecretkey'.

2

Create a route to store the user's name in session

Add a route for /setname using @app.route('/setname'). Define a function called set_name that stores the string 'Alice' in the session under the key 'username'. Return the string 'Name stored in session.'.

Flask

from flask import Flask, session

app = Flask(__name__)
app.secret_key = 'mysecretkey'

# Your code here

Hint

Use session['username'] = 'Alice' to save the name.

3

Create a homepage route to show the stored name

Add a route for / using @app.route('/') . Define a function called home that gets the 'username' from session using session.get('username'). Return a string f'Hello, {username}!' if the name exists, otherwise return 'Hello, Guest!'.

Flask

from flask import Flask, session

app = Flask(__name__)
app.secret_key = 'mysecretkey'

@app.route('/setname')
def set_name():
    session['username'] = 'Alice'
    return 'Name stored in session.'

# Your code here

Hint

Use session.get('username') to safely get the name.

4

Add the app run command to start the server

Add the code if __name__ == '__main__': and inside it call app.run(debug=True) to start the Flask server in debug mode.

Flask

from flask import Flask, session

app = Flask(__name__)
app.secret_key = 'mysecretkey'

@app.route('/setname')
def set_name():
    session['username'] = 'Alice'
    return 'Name stored in session.'

@app.route('/')
def home():
    username = session.get('username')
    if username:
        return f'Hello, {username}!'
    else:
        return 'Hello, Guest!'

# Your code here

Hint

This code runs the app when you start the script.

Practice

1. What is the main purpose of using session data storage in a Flask web application?

easy

A. To permanently save data on the server's hard drive

B. To keep user information between different pages securely

C. To speed up the loading of static files like images

D. To replace cookies with a faster alternative

Solution

1. Step 1: Understand session data role

   Session data stores user info temporarily during their visit to keep state across pages.

2. Step 2: Differentiate from other storage

   It is not permanent storage or related to static files; it keeps data safe between requests.

3. Final Answer:

   To keep user information between different pages securely -> Option B

4. Quick Check:

   Session stores user info between pages = A [OK]

Hint: Sessions keep user info across pages safely [OK]

Common Mistakes:

• Confusing session with permanent database storage
• Thinking session speeds up static file loading
• Believing session replaces cookies entirely

2. Which line of code correctly sets the secret key needed for Flask sessions?

easy

A. app.set_secret('mysecret')

B. session.secret = 'mysecret'

C. app.secret_key = 'mysecret'

D. app.session_key = 'mysecret'

Solution

1. Step 1: Recall Flask session setup

   Flask requires setting app.secret_key to enable session encryption.

2. Step 2: Check syntax correctness

   Only app.secret_key = 'mysecret' is valid; others are invalid method or attribute names.

3. Final Answer:

   app.secret_key = 'mysecret' -> Option C

4. Quick Check:

   Set secret_key with app.secret_key = value [OK]

Hint: Use app.secret_key to enable sessions [OK]

Common Mistakes:

• Using wrong attribute like app.session_key
• Trying to call a non-existent method set_secret
• Assigning secret to session object instead of app

3. Given this Flask code snippet:

from flask import Flask, session
app = Flask(__name__)
app.secret_key = 'key'

@app.route('/')
def index():
    session['count'] = session.get('count', 0) + 1
    return str(session['count'])

What will the user see on their first visit to the '/' route?

medium

A. 0

B. Error

C. None

D. 1

Solution

1. Step 1: Analyze session count initialization

   On first visit, session.get('count', 0) returns 0, then adds 1, so count becomes 1.

2. Step 2: Understand return value

   The function returns the string of session['count'], which is '1'.

3. Final Answer:

   1 -> Option D

4. Quick Check:

   First visit count = 1 [OK]

Hint: session.get with default 0 then add 1 means first count is 1 [OK]

Common Mistakes:

• Thinking count starts at 0 instead of 1
• Expecting None because key is missing
• Assuming code causes an error without secret_key

4. What is wrong with this Flask code snippet for storing session data?

from flask import Flask, session
app = Flask(__name__)

@app.route('/')
def index():
    session['user'] = 'Alice'
    return session['user']

medium

A. Missing app.secret_key setup

B. session['user'] cannot store strings

C. Flask app must import request to use session

D. Route decorator syntax is incorrect

Solution

1. Step 1: Check session requirements

   Flask sessions require app.secret_key to be set for security.

2. Step 2: Identify missing secret_key

   The code does not set app.secret_key, so session will not work properly.

3. Final Answer:

   Missing app.secret_key setup -> Option A

4. Quick Check:

   Sessions need app.secret_key set [OK]

Hint: Always set app.secret_key before using session [OK]

Common Mistakes:

• Thinking session can't store strings
• Believing request import is needed for session
• Assuming route decorator syntax is wrong

5. You want to store a user's preferred language in the session and retrieve it safely. Which code snippet correctly sets and reads this value in Flask?

hard

A. session['lang'] = 'en'
language = session.get('lang', 'default')

B. session.set('lang', 'en')
language = session.get('lang')

C. session['lang'] = 'en'
language = session['lang']

D. session['lang'] = 'en'
language = session['language']

Solution

1. Step 1: Correctly set session key

   Assigning with session['lang'] = 'en' is correct to store the language.

2. Step 2: Safely retrieve session value

   Using session.get('lang', 'default') safely reads the value with a fallback if missing.

3. Final Answer:

   session['lang'] = 'en'\nlanguage = session.get('lang', 'default') -> Option A

4. Quick Check:

   Use session.get to safely read session keys [OK]

Hint: Use session.get('key', default) to avoid errors [OK]

Common Mistakes:

• Using session.set which does not exist
• Accessing wrong key name on read
• Not providing default causing KeyError