[Django] #31274: Use signing infrastructure for session data encoding/decoding

27 views
Skip to first unread message

Django

unread,
Feb 15, 2020, 6:18:50 AM2/15/20
to django-...@googlegroups.com
#31274: Use signing infrastructure for session data encoding/decoding
------------------------------------------------+------------------------
Reporter: Claude Paroz | Owner: nobody
Type: Cleanup/optimization | Status: new
Component: contrib.sessions | Version: master
Severity: Normal | Keywords:
Triage Stage: Unreviewed | Has patch: 0
Needs documentation: 0 | Needs tests: 0
Patch needs improvement: 0 | Easy pickings: 0
UI/UX: 0 |
------------------------------------------------+------------------------
The signing infrastructure has `dumps` and `loads` utilities to encode and
decode data securely. `SessionBase` should use those instead of handling
hash and encoding itself.

--
Ticket URL: <https://code.djangoproject.com/ticket/31274>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

Django

unread,
Feb 15, 2020, 6:22:17 AM2/15/20
to django-...@googlegroups.com
#31274: Use signing infrastructure for session data encoding/decoding
-------------------------------------+-------------------------------------

Reporter: Claude Paroz | Owner: nobody
Type: | Status: new
Cleanup/optimization |
Component: contrib.sessions | Version: master
Severity: Normal | Resolution:
Keywords: | Triage Stage:
| Unreviewed
Has patch: 1 | Needs documentation: 0

Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Changes (by Claude Paroz):

* has_patch: 0 => 1


Comment:

[https://github.com/django/django/pull/12460 PR]

--
Ticket URL: <https://code.djangoproject.com/ticket/31274#comment:1>

Django

unread,
Feb 17, 2020, 1:09:41 AM2/17/20
to django-...@googlegroups.com
#31274: Use signing infrastructure for session data encoding/decoding.
-------------------------------------+-------------------------------------
Reporter: Claude Paroz | Owner: Claude
Type: | Paroz
Cleanup/optimization | Status: assigned
Component: contrib.sessions | Version: master
Severity: Normal | Resolution:
Keywords: | Triage Stage: Accepted
Has patch: 1 | Needs documentation: 0

Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Changes (by felixxm):

* owner: nobody => Claude Paroz
* status: new => assigned
* stage: Unreviewed => Accepted


--
Ticket URL: <https://code.djangoproject.com/ticket/31274#comment:2>

Django

unread,
Mar 2, 2020, 4:23:24 AM3/2/20
to django-...@googlegroups.com
#31274: Use signing infrastructure for session data encoding/decoding.
-------------------------------------+-------------------------------------
Reporter: Claude Paroz | Owner: Claude
Type: | Paroz
Cleanup/optimization | Status: assigned
Component: contrib.sessions | Version: master
Severity: Normal | Resolution:
Keywords: | Triage Stage: Ready for
| checkin
Has patch: 1 | Needs documentation: 0

Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Changes (by felixxm):

* stage: Accepted => Ready for checkin


--
Ticket URL: <https://code.djangoproject.com/ticket/31274#comment:3>

Django

unread,
Mar 2, 2020, 6:42:26 AM3/2/20
to django-...@googlegroups.com
#31274: Use signing infrastructure for session data encoding/decoding.
-------------------------------------+-------------------------------------
Reporter: Claude Paroz | Owner: Claude
Type: | Paroz
Cleanup/optimization | Status: closed
Component: contrib.sessions | Version: master
Severity: Normal | Resolution: fixed

Keywords: | Triage Stage: Ready for
| checkin
Has patch: 1 | Needs documentation: 0

Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------
Changes (by Mariusz Felisiak <felisiak.mariusz@…>):

* status: assigned => closed
* resolution: => fixed


Comment:

In [changeset:"d4fff711d4c97356bd6ba1273d2a5e349326eb5f" d4fff711]:
{{{
#!CommitTicketReference repository=""
revision="d4fff711d4c97356bd6ba1273d2a5e349326eb5f"
Fixed #31274 -- Used signing infrastructure in
SessionBase.encode()/decode().

Thanks Mariusz Felisiak and Florian Apolloner for the reviews.
}}}

--
Ticket URL: <https://code.djangoproject.com/ticket/31274#comment:4>

Django

unread,
Jan 14, 2021, 2:12:18 PM1/14/21
to django-...@googlegroups.com
#31274: Use signing infrastructure for session data encoding/decoding.
-------------------------------------+-------------------------------------
Reporter: Claude Paroz | Owner: Claude
Type: | Paroz
Cleanup/optimization | Status: closed
Component: contrib.sessions | Version: master

Severity: Normal | Resolution: fixed
Keywords: | Triage Stage: Ready for
| checkin
Has patch: 1 | Needs documentation: 0

Needs tests: 0 | Patch needs improvement: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+-------------------------------------

Comment (by Mariusz Felisiak <felisiak.mariusz@…>):

In [changeset:"8250145a0cbfd15aa16c2ad4e2235d1afe3a7359" 8250145a]:
{{{
#!CommitTicketReference repository=""
revision="8250145a0cbfd15aa16c2ad4e2235d1afe3a7359"
Refs #31274 -- Removed support for the pre-Django 3.1 encoding format of
sessions.

Per deprecation timeline.
}}}

--
Ticket URL: <https://code.djangoproject.com/ticket/31274#comment:5>

Reply all
Reply to author
Forward
0 new messages