Flask session cookie vulnerability

Sessions use a cookie! Session data is stored on the server side, but a UID is stored on client side in a cookie . It allows the server to match a given user with the right session data.

Flask sessions in essence are used to remember information from one request to another when the user is navigating in your application . To achieve this, Flask Session will use cookies to persist this data, but, not only as plain text, it will use signed cookies to achieve this.19 Mar 2021

A session stores the variables and their values within a file in a temporary directory on the server. Cookies are stored on the user’s computer as a text file . The session ends when the user logout from the application or closes his web browser. Cookies end on the lifetime set by the user.

Flask-Session is an extension for Flask that support Server-side Session to your application . The Session is the time between the client logs in to the server and logs out of the server. The data that is required to be saved in the Session is stored in a temporary directory on the server.