base_handler.py 文件源码

def session(self):
        session_id = self.get_secure_cookie('session_id')
        hmac_key = self.get_secure_cookie('verification')

        if session_id and hmac_key:
            check_hmac = self._generate_hmac(session_id)
            if hmac_key != check_hmac:
                raise HTTPError(403)
        else:
            session_id = self._generate_id()
            hmac_key = self._generate_hmac(session_id)

        self.set_secure_cookie('session_id', session_id)
        self.set_secure_cookie('verification', hmac_key)
        return session_id