Skip to main content

Zope session

Project description

This package provides session support.

Zope3 Session Implementation


Sessions allow us to fake state over a stateless protocol - HTTP. We do this by having a unique identifier stored across multiple HTTP requests, be it a cookie or some id mangled into the URL.

The IClientIdManager Utility provides this unique id. It is responsible for propagating this id so that future requests from the client get the same id (eg. by setting an HTTP cookie). (Note that this, and all interfaces, are imported from this package for demonstration purposes only. They have been moved to zope.session.interfaces) This utility is used when we adapt the request to the unique client id:

>>> from import IClientId
>>> IClientId
<InterfaceClass zope.session.interfaces.IClientId>
>>> client_id = IClientId(request)

The ISession adapter gives us a mapping that can be used to store and retrieve session data. A unique key (the package id) is used to avoid namespace clashes:

>>> from import ISession
>>> pkg_id = ''
>>> session = ISession(request)[pkg_id]
>>> session['color'] = 'red'
>>> session2 = ISession(request)['']
>>> session2['color'] = 'blue'
>>> session['color']
>>> session2['color']

Data Storage

The actual data is stored in an ISessionDataContainer utility. ISession chooses which ISessionDataContainer should be used by looking up as a named utility using the package id. This allows the site administrator to configure where the session data is actually stored by adding a registration for desired ISessionDataContainer with the correct name.

>>> from import ISessionDataContainer
>>> from zope.component import getUtility
>>> sdc = getUtility(ISessionDataContainer, pkg_id)
>>> sdc[client_id][pkg_id] is session
>>> sdc[client_id][pkg_id]['color']

If no ISessionDataContainer utility can be located by name using the package id, then the unnamed ISessionDataContainer utility is used as a fallback. An unnamed ISessionDataContainer is automatically created for you, which may replaced with a different implementation if desired.

>>> ISession(request)['unknown'] \
...     is getUtility(ISessionDataContainer)[client_id]['unknown']

The ISessionDataContainer contains ISessionData objects, and ISessionData objects in turn contain ISessionPkgData objects. You should never need to know this unless you are writing administrative views for the session machinery.

>>> from import ISessionData, ISessionPkgData
>>> ISessionData.providedBy(sdc[client_id])
>>> ISessionPkgData.providedBy(sdc[client_id][pkg_id])

The ISessionDataContainer is responsible for expiring session data. The expiry time can be configured by settings its timeout attribute.

>>> sdc.timeout = 1200 # 1200 seconds or 20 minutes


Data stored in the session must be persistent or picklable.

>>> class NoPickle(object):
...     def __getstate__(self):
...         raise TypeError("Cannot serialize")
>>> session['oops'] = NoPickle()
>>> import transaction
>>> transaction.commit()
Traceback (most recent call last):
TypeError: Cannot serialize

Page Templates

Session data may be accessed in page template documents using TALES:

<span tal:content="request/ | default">


<div tal:define="session request/">
    <script type="text/server-python">
            session['count'] += 1
        except KeyError:
            session['count'] = 1

    <span tal:content="session/count" />


5.0 (2023-02-10)

  • Drop support for Python 2.7, 3.5, 3.6.

  • Add support for Python 3.8, 3.9, 3.10, 3.11.

4.1.0 (2018-10-22)

  • Add support for Python 3.7.

4.0.0 (2017-05-29)

  • Add support for Python 3.4, 3.5, 3.6 and PyPy.

  • Remove dependency on ZODB3 and other packages that are not used by this package, leaving behind only zope.session. Packages that are used during testing are now test dependencies.

3.6.2 (2010-09-01)

  • Remove undeclared dependency on zope.deferredimport.

3.6.1 (2010-02-06)

  • Include meta.zcml from zope.securitypolicy

3.6.0 (2009-02-01)

  • Use instead of in tests.

3.5.2 (2009-01-27)

  • Fixed tearDown-Error in tests.

3.5.1 (2007-10-31)

  • Resolve ZopeSecurityPolicy deprecation warning.

3.5.0 (2007-09-27)

  • A release to override an untagged, unreasoned dev release in

3.4.3 (2007-09-27)

  • Fix package meta-data.

3.4.2 (2007-09-24)

  • rebumped to replace faulty egg

  • added missing dependecy to zope.session

3.4.1 (2007-09-24)

  • Added missing files to egg distribution

3.4.0 (2007-09-24)

  • Initial documented release

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution (13.5 kB view hashes)

Uploaded source

Built Distribution (15.3 kB view hashes)

Uploaded py3

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page