add session.jwt_secret_keys to .ini file, with a value python -c 'import secrets; print(secrets.token_hex());'
session.type = cookie is no longer used
optionally session.read_original_format = true and rename session.validate_key to session.original_format_validate_key for backwards compatibility. Remove after a transition period
optionally session.write_original_format = true if it takes a while to deploy all your code to multiple hosts/procs. Then remove once all processes have new code.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
for deployment/changelog:
session.jwt_secret_keysto .ini file, with a valuepython -c 'import secrets; print(secrets.token_hex());'session.type = cookieis no longer usedsession.read_original_format = trueand renamesession.validate_keytosession.original_format_validate_keyfor backwards compatibility. Remove after a transition periodsession.write_original_format = trueif it takes a while to deploy all your code to multiple hosts/procs. Then remove once all processes have new code.