max_age_days parameter to get_secure_cookie. A value of None limits the lifetime to the current browser session. Secure cookies may contain arbitrary byte values, not just unicode strings (unlike regular cookies) obtained via a call like tornado.locale.get("en") RequestHandler.locale The locale for the current session. Determined by either get_user_locale, which you can override to set the locale based on, e.g., for more information. RequestHandler.xsrf_token The XSRF-prevention token for the current user/session. To prevent cross-site request forgery, we set an ‘_xsrf’ cookie and include the same ‘_xsrf’ value

obtained via a call like tornado.locale.get("en") RequestHandler.locale The locale for the current session. Determined by either get_user_locale, which you can override to set the locale based on, e.g., for more information. RequestHandler.xsrf_token The XSRF-prevention token for the current user/session. To prevent cross-site request forgery, we set an ‘_xsrf’ cookie and include the same ‘_xsrf’ value additional change to support the `session_expires field in the new format. The session_expires field is currently a string; it should be accessed as int(user['session_expires']) because it will change

max_age_days parameter to get_secure_cookie. A value of None limits the lifetime to the current browser session. Secure cookies may contain arbitrary byte values, not just unicode strings (unlike regular cookies) framework 47 Tornado Documentation, Release 6.1 RequestHandler.locale The locale for the current session. Determined by either get_user_locale, which you can override to set the locale based on, e.g., Documentation, Release 6.1 RequestHandler.xsrf_token The XSRF-prevention token for the current user/session. To prevent cross-site request forgery, we set an ‘_xsrf’ cookie and include the same ‘_xsrf’ value

max_age_days parameter to get_signed_cookie. A value of None limits the lifetime to the current browser session. Secure cookies may contain arbitrary byte values, not just unicode strings (unlike regular cookies) Documentation Tornado Documentation, Release 6.4 RequestHandler.locale The locale for the current session. Determined by either get_user_locale, which you can override to set the locale based on, e.g., for more information. RequestHandler.xsrf_token The XSRF-prevention token for the current user/session. To prevent cross-site request forgery, we set an ‘_xsrf’ cookie and include the same ‘_xsrf’ value

max_age_days parameter to get_secure_cookie. A value of None limits the lifetime to the current browser session. Secure cookies may contain arbitrary byte values, not just unicode strings (unlike regular cookies) obtained via a call like tornado. locale.get("en") RequestHandler.locale The locale for the current session. Determined by either get_user_locale, which you can override to set the locale based on, e.g., for more information. RequestHandler.xsrf_token The XSRF-prevention token for the current user/session. To prevent cross-site request forgery, we set an ‘_xsrf’ cookie and include the same ‘_xsrf’ value

max_age_days parameter to get_signed_cookie. A value of None limits the lifetime to the current browser session. Secure cookies may contain arbitrary byte values, not just unicode strings (unlike regular cookies) Documentation Tornado Documentation, Release 6.4 RequestHandler.locale The locale for the current session. Determined by either get_user_locale, which you can override to set the locale based on, e.g., for more information. RequestHandler.xsrf_token The XSRF-prevention token for the current user/session. To prevent cross-site request forgery, we set an ‘_xsrf’ cookie and include the same ‘_xsrf’ value

max_age_days parameter to get_signed_cookie. A value of None limits the lifetime to the current browser session. Secure cookies may contain arbitrary byte values, not just unicode strings (unlike regular cookies) Documentation Tornado Documentation, Release 6.4 RequestHandler.locale The locale for the current session. Determined by either get_user_locale, which you can override to set the locale based on, e.g., for more information. RequestHandler.xsrf_token The XSRF-prevention token for the current user/session. To prevent cross-site request forgery, we set an ‘_xsrf’ cookie and include the same ‘_xsrf’ value

max_age_days parameter to get_signed_cookie. A value of None limits the lifetime to the current browser session. Secure cookies may contain arbitrary byte values, not just unicode strings (unlike regular cookies) Documentation Tornado Documentation, Release 6.3.3 RequestHandler.locale The locale for the current session. Determined by either get_user_locale, which you can override to set the locale based on, e.g., for more information. RequestHandler.xsrf_token The XSRF-prevention token for the current user/session. To prevent cross-site request forgery, we set an ‘_xsrf’ cookie and include the same ‘_xsrf’ value

max_age_days parameter to get_signed_cookie. A value of None limits the lifetime to the current browser session. Secure cookies may contain arbitrary byte values, not just unicode strings (unlike regular cookies) obtained via a call like tornado. locale.get("en") RequestHandler.locale The locale for the current session. Determined by either get_user_locale, which you can override to set the locale based on, e.g., for more information. RequestHandler.xsrf_token The XSRF-prevention token for the current user/session. To prevent cross-site request forgery, we set an ‘_xsrf’ cookie and include the same ‘_xsrf’ value

obtained via a call like tornado.locale.get("en") RequestHandler.locale The locale for the current session. Determined by either get_user_locale, which you can override to set the locale based on, e.g., for more information. RequestHandler.xsrf_token The XSRF-prevention token for the current user/session. To prevent cross-site request forgery, we set an ‘_xsrf’ cookie and include the same ‘_xsrf’ value to facebook_request session_expires, an integer encoded as a string representing the time until the access token expires in seconds. This field should be used like int(user['session_expires']); in a future