You want to implement a Flask app that invalidates the session cookie after 10 minutes of inactivity. Which approach is best?

hard📝 Application Q9 of 15

Flask - Security Best Practices

ASet SESSION_COOKIE_SAMESITE to 'Strict' to expire cookie

BSet PERMANENT_SESSION_LIFETIME to 10 minutes and use session.permanent = True

CManually delete session cookie after 10 minutes in client-side JavaScript

DSet SECRET_KEY to a new value every 10 minutes

Step-by-Step Solution

Solution:

Step 1: Understand session lifetime control
PERMANENT_SESSION_LIFETIME controls how long a permanent session lasts.
Step 2: Enable permanent sessions
Setting session.permanent = True activates this lifetime for the session cookie.
Final Answer:
Set PERMANENT_SESSION_LIFETIME to 10 minutes and use session.permanent = True -> Option B
Quick Check:
Use PERMANENT_SESSION_LIFETIME + session.permanent for expiry [OK]

Quick Trick: Use PERMANENT_SESSION_LIFETIME + session.permanent for expiry [OK]

Common Mistakes:

MISTAKES

Master "Security Best Practices" in Flask

9 interactive learning modes - each teaches the same concept differently

Want More Practice?

15+ quiz questions · All difficulty levels · Free

More Flask Quizzes