This is an automated email from the ASF dual-hosted git repository.
sfirke pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/superset.git
The following commit(s) were added to refs/heads/master by this push:
new 55801123a82 docs(security): drop deprecated SESSION_USE_SIGNER and
dedupe the server-side session example (#45635)
55801123a82 is described below
commit 55801123a82336d0009c5d11ce7970bc61120273
Author: Sam Firke <[email protected]>
AuthorDate: Fri Oct 23 13:53:20 2026 -0400
docs(security): drop deprecated SESSION_USE_SIGNER and dedupe the
server-side session example (#45635)
---
docs/admin_docs/security/securing_superset.mdx | 3 ---
docs/admin_docs/security/security.mdx | 13 +++----------
.../version-6.1.0/security/securing_superset.mdx | 3 ---
.../version-6.1.0/security/security.mdx | 13 +++----------
.../version-6.0.0/security/security.mdx | 2 --
5 files changed, 6 insertions(+), 28 deletions(-)
diff --git a/docs/admin_docs/security/securing_superset.mdx
b/docs/admin_docs/security/securing_superset.mdx
index 81aea95b1f7..19c13e42735 100644
--- a/docs/admin_docs/security/securing_superset.mdx
+++ b/docs/admin_docs/security/securing_superset.mdx
@@ -68,9 +68,6 @@ SESSION_REDIS = Redis(
ssl=os.environ.get('REDIS_SSL_ENABLED', 'True').lower() == 'true',
ssl_cert_reqs='required' # Or another appropriate SSL setting
)
-
-# 4. Ensure the session cookie is signed for integrity
-SESSION_USE_SIGNER = True
```
#### **Configure Session Lifetime and Cookie Security Flags**
diff --git a/docs/admin_docs/security/security.mdx
b/docs/admin_docs/security/security.mdx
index 20d602fd6df..fd2ff335f32 100644
--- a/docs/admin_docs/security/security.mdx
+++ b/docs/admin_docs/security/security.mdx
@@ -788,16 +788,9 @@ To enable this extension you have to set:
SESSION_SERVER_SIDE = True
```
-Flask-Session offers multiple backend session interfaces for Flask, here's an
example for Redis:
-
-```python
-from redis import Redis
-
-SESSION_TYPE = "redis"
-SESSION_REDIS = Redis(host="redis", port=6379, db=0)
-# sign the session cookie sid
-SESSION_USE_SIGNER = True
-```
+Flask-Session offers multiple backend session interfaces for Flask. See the
+[production hardening
guide](/admin-docs/security/securing_superset#session-management-security-critical)
+for a complete Redis example.
### Content Security Policy (CSP)
diff --git
a/docs/admin_docs_versioned_docs/version-6.1.0/security/securing_superset.mdx
b/docs/admin_docs_versioned_docs/version-6.1.0/security/securing_superset.mdx
index 8ed4357d144..4740a9aa4ac 100644
---
a/docs/admin_docs_versioned_docs/version-6.1.0/security/securing_superset.mdx
+++
b/docs/admin_docs_versioned_docs/version-6.1.0/security/securing_superset.mdx
@@ -68,9 +68,6 @@ SESSION_REDIS = Redis(
ssl=os.environ.get('REDIS_SSL_ENABLED', 'True').lower() == 'true',
ssl_cert_reqs='required' # Or another appropriate SSL setting
)
-
-# 4. Ensure the session cookie is signed for integrity
-SESSION_USE_SIGNER = True
```
#### **Configure Session Lifetime and Cookie Security Flags**
diff --git a/docs/admin_docs_versioned_docs/version-6.1.0/security/security.mdx
b/docs/admin_docs_versioned_docs/version-6.1.0/security/security.mdx
index 5bf9e5bf48b..a81d77dfd26 100644
--- a/docs/admin_docs_versioned_docs/version-6.1.0/security/security.mdx
+++ b/docs/admin_docs_versioned_docs/version-6.1.0/security/security.mdx
@@ -484,16 +484,9 @@ To enable this extension you have to set:
SESSION_SERVER_SIDE = True
```
-Flask-Session offers multiple backend session interfaces for Flask, here's an
example for Redis:
-
-```python
-from redis import Redis
-
-SESSION_TYPE = "redis"
-SESSION_REDIS = Redis(host="redis", port=6379, db=0)
-# sign the session cookie sid
-SESSION_USE_SIGNER = True
-```
+Flask-Session offers multiple backend session interfaces for Flask. See the
+[production hardening
guide](/admin-docs/security/securing_superset#session-management-security-critical)
+for a complete Redis example.
### Content Security Policy (CSP)
diff --git a/docs/user_docs_versioned_docs/version-6.0.0/security/security.mdx
b/docs/user_docs_versioned_docs/version-6.0.0/security/security.mdx
index b9890c418b4..586830b85ce 100644
--- a/docs/user_docs_versioned_docs/version-6.0.0/security/security.mdx
+++ b/docs/user_docs_versioned_docs/version-6.0.0/security/security.mdx
@@ -211,8 +211,6 @@ from redis import Redis
SESSION_TYPE = "redis"
SESSION_REDIS = Redis(host="redis", port=6379, db=0)
-# sign the session cookie sid
-SESSION_USE_SIGNER = True
```
### Content Security Policy (CSP)
