Flask Session Sign

Category: Authentication

Status: Registered and callable in the CyberChef 11.3.0 compatibility inventory.

Input / output: JSON → string

What it does

Signs a JSON payload to produce a Flask session cookie (itsdangerous HMAC).

Note

Status here means the operation name is implemented and callable. It does not by itself promise byte-for-byte parity for every upstream option. See Compatibility and current status for the verified scope and known boundaries.

Arguments and options

Arguments are positional. Keep their order when using bake() or Pipeline.then().

Index	Name	UI type	PyChef default	Accepted values / format
`0`	Key	`toggleString`	`{'string': '', 'option': 'Hex'}`	`''`
`1`	Salt	`toggleString`	`{'string': 'cookie-session', 'option': 'UTF8'}`	`'cookie-session'`
`2`	Algorithm	`option`	`'sha1'`	`'sha1'`, `'sha256'`

Recipe template

Important

This is a call template built from the documented defaults. Replace placeholder values such as empty keys, paths, patterns, or lookup data before running it.

from pychef import bake

input_value = "example"
args = [{'string': '', 'option': 'Hex'}, {'string': 'cookie-session', 'option': 'UTF8'}, 'sha1']
result = bake(input_value, [{"op": 'Flask Session Sign', "args": args}])
print(result)

Pipeline example

from pychef import Pipeline

args = [{'string': '', 'option': 'Hex'}, {'string': 'cookie-session', 'option': 'UTF8'}, 'sha1']
transform = Pipeline().then('Flask Session Sign', *args)
result = transform("example")

Direct call

pychef.ops.run_operation runs any registered operation as a plain function, under the active ExecutionPolicy (safe defaults, no network):

from pychef.ops import run_operation

args = [{'string': '', 'option': 'Hex'}, {'string': 'cookie-session', 'option': 'UTF8'}, 'sha1']
result = run_operation('Flask Session Sign', "example", args=args)

Common operations also have typed helpers in Direct operations.

Low-level operation module

Warning

The module below is an internal implementation detail. It applies no execution policy, resource limits, or error sanitization; prefer bake(), Pipeline, or pychef.ops for application code.

The registered entry point lives in pychef.operations.by_operation.flask_session_sign. Direct calls receive the input value and a positional argument tuple:

from pychef.operations.by_operation.flask_session_sign import run

result = run("example", tuple([{'string': '', 'option': 'Hex'}, {'string': 'cookie-session', 'option': 'UTF8'}, 'sha1']))

pychef.operations.by_operation.flask_session_sign.run(value, args)

Run this operation using its shared internal implementation.

Parameters:

value (str | bytes)
args (Sequence[Any])

Return type:

str | bytes