Re: Use signing backend for signed_cookie session engine

2017-02-17 Thread Tim Graham
These questions involving old code aren't always easily answered. I would try to answer it by looking through git blame and finding the relative commits and tickets to see if there's an explanation there. On Wednesday, February 15, 2017 at 8:07:45 PM UTC-5, Danielle Madeley wrote: > > Hi all, >

Use signing backend for signed_cookie session engine

2017-02-15 Thread Danielle Madeley
Hi all, Was looking at implementing a custom signing backend via a HSM to sign and validate my Django sessions without knowing the key. It seems that the functions signing.loads() and signing.dumps() force you to use TimestampSigner [1] rather than calling get_cookie_signer(). This has the int