From 80af680aae013938ee535ebe17596472099404a5 Mon Sep 17 00:00:00 2001 From: nbessi Date: Wed, 26 Nov 2025 11:40:01 +0100 Subject: [PATCH] fix: Ensure anonymous session timeout is applied when expiration is not an integer or is zero. --- session_redis/session.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/session_redis/session.py b/session_redis/session.py index d45aa5b..e995ce6 100644 --- a/session_redis/session.py +++ b/session_redis/session.py @@ -96,6 +96,10 @@ class RedisSessionStore(SessionStore): "utf-8" ) if self.redis.set(key, data): + if type(expiration) != int: + expiration = DEFAULT_SESSION_TIMEOUT_ANONYMOUS + if expiration == 0: + expiration = DEFAULT_SESSION_TIMEOUT_ANONYMOUS return self.redis.expire(key, expiration) def delete(self, session):