fix: Ensure anonymous session timeout is applied when expiration is not an integer or is zero.

This commit is contained in:
nbessi
2025-11-26 11:40:01 +01:00
parent 750bc4dcf8
commit 80af680aae
+4
View File
@@ -96,6 +96,10 @@ class RedisSessionStore(SessionStore):
"utf-8"
)
if self.redis.set(key, data):
if type(expiration) != int:
expiration = DEFAULT_SESSION_TIMEOUT_ANONYMOUS
if expiration == 0:
expiration = DEFAULT_SESSION_TIMEOUT_ANONYMOUS
return self.redis.expire(key, expiration)
def delete(self, session):