From 60d2661b0db6555bc8aaf86def74ca5d0fad1e0b Mon Sep 17 00:00:00 2001
From: richard-dds <richard-ctr@friends.dds.mil>
Date: Thu, 2 Aug 2018 16:50:56 -0400
Subject: [PATCH] Use Flask-Sessions for session management

---
 atst/app.py     | 11 ++++++++++-
 config/base.ini |  4 ++++
 2 files changed, 14 insertions(+), 1 deletion(-)

diff --git a/atst/app.py b/atst/app.py
index 5e45af43..e08f364b 100644
--- a/atst/app.py
+++ b/atst/app.py
@@ -1,7 +1,9 @@
 import os
 import re
 from configparser import ConfigParser
-from flask import Flask, request, g
+from flask import Flask, request, g, session
+from flask_session import Session
+import redis
 from unipath import Path
 
 from atst.database import db
@@ -24,11 +26,15 @@ def make_app(config):
         template_folder=parent_dir.child("templates").absolute(),
         static_folder=parent_dir.child("static").absolute(),
     )
+    redis = make_redis(config)
+
     app.config.update(config)
+    app.config.update({"SESSION_REDIS": redis})
 
     make_flask_callbacks(app)
 
     db.init_app(app)
+    Session(app)
     assets_environment.init_app(app)
 
     app.register_blueprint(bp)
@@ -106,3 +112,6 @@ def make_config():
     config.set("default", "DATABASE_URI", database_uri)
 
     return map_config(config)
+
+def make_redis(config):
+    return redis.Redis.from_url(config['REDIS_URI'])
diff --git a/config/base.ini b/config/base.ini
index fddfa26f..7e47675b 100644
--- a/config/base.ini
+++ b/config/base.ini
@@ -16,3 +16,7 @@ PGPORT = 5432
 PGUSER = postgres
 PGPASSWORD = postgres
 PGDATABASE = atat
+SESSION_TYPE = "redis"
+SESSION_COOKIE_DOMAIN= "atat.codes"
+SESSION_COOKIE_SECURE = True
+SESSION_USE_SIGNER = True