Add flask-session

pyproject.toml

@@ -43,6 +43,7 @@ flask-oidc = "^2.1.1"
 Flask-SQLAlchemy = "^3.1.1"
 Flask-Cors = "^4.0.0"
 Flask-Migrate = "^4.0.5"
+Flask-Session = "^0.5.0"
 itsdangerous = {version = "==2.0.1", optional = true}
 # causes a problem with OIDC callback (returns 500)
 Werkzeug = "^3.0.1"

waiverdb/app.py

@@ -10,6 +10,7 @@
 from flask import Flask, current_app, send_from_directory
 from flask_cors import CORS
 from flask_migrate import Migrate
+from flask_session import Session
 from sqlalchemy import event, text
 from sqlalchemy.exc import ProgrammingError
 import requests
@@ -85,7 +86,7 @@ def populate_db_config(app):
 
 
 # applicaiton factory http://flask.pocoo.org/docs/0.12/patterns/appfactories/
-def create_app(config_obj=None):
+def create_app(config_obj=None) -> Flask:
     app = Flask(__name__)
 
     if config_obj:
@@ -102,15 +103,17 @@ def create_app(config_obj=None):
     app.register_error_handler(requests.Timeout, json_error)
 
     populate_db_config(app)
-    if 'OIDC' in auth_methods(app):
-        oidc.init_app(app)
-        app.oidc = oidc
     # initialize logging
     init_logging(app)
     # initialize tracing
     init_tracing(app)
     # initialize db
     db.init_app(app)
+    init_session(app)
+    if 'OIDC' in auth_methods(app):
+        oidc.init_app(app)
+        app.oidc = oidc
+
     # initialize db migrations
     migrations_dir = os.path.join(os.path.abspath(os.path.dirname(__file__)),
                                   'migrations')
@@ -131,6 +134,19 @@ def create_app(config_obj=None):
     return app
 
 
+def init_session(app: Flask) -> None:
+    app.config["SESSION_SQLALCHEMY"] = db
+    app.server_session = Session(app)
+    if app.config["SESSION_TYPE"] == "sqlalchemy":
+        import sqlalchemy
+
+        with app.app_context():
+            inspect = sqlalchemy.inspect(db.engine)
+            table = app.config["SESSION_SQLALCHEMY_TABLE"]
+            if not inspect.has_table(table):
+                db.create_all()
+
+
 def healthcheck():
     """
     Request handler for performing an application-level health check. This is

waiverdb/config.py

@@ -38,6 +38,13 @@ class Config(object):
     OTEL_EXPORTER_OTLP_METRICS_ENDPOINT = None
     OTEL_EXPORTER_SERVICE_NAME = "waiverdb"
 
+    SESSION_TYPE = "sqlalchemy"
+    SESSION_SQLALCHEMY_TABLE = "sessions"
+    SESSION_PERMANENT = True
+    SESSION_USE_SIGNER = True
+    SESSION_COOKIE_SECURE = True
+    SESSION_COOKIE_SAMESITE = "Lax"
+
 
 class ProductionConfig(Config):
     DEBUG = False