Ask HN: How to maintain session along with Websockets?

2 points by subho007 ↗ HN
I am using Flask, Gevent and Websocket for python. How can I use flask session inside the Websocket connection? Rather how will I know that this websocket connection was initiated by this user? If i pass a username as token then anyone can access it with other username also ! Any idea about how that can be solved? I am using * Flask * Flask-Login * SQLAlchemy

Any help?

2 comments

[ 4.2 ms ] story [ 17.6 ms ] thread
Hi Sub, you are asking for security question I believe. You need to make sure you pass an unpredictable "session" token.