Check should_set_cookie before setting it

setting the cookie on every request is not ideal in many cases. checking this method mimics the behavior of the default flask logic allowing configuration of when cookies should be set. this changes nothing unless  SESSION_REFRESH_EACH_REQUEST is true in app config.

Author: zebpalmer

flask_session/sessions.py

@@ -139,6 +139,8 @@ def open_session(self, app, request):
         return self.session_class(sid=sid, permanent=self.permanent)
 
     def save_session(self, app, session, response):
+        if not self.should_set_cookie(app, session):
+            return
         domain = self.get_cookie_domain(app)
         path = self.get_cookie_path(app)
         if not session:
@@ -260,6 +262,8 @@ def open_session(self, app, request):
         return self.session_class(sid=sid, permanent=self.permanent)
 
     def save_session(self, app, session, response):
+        if not self.should_set_cookie(app, session):
+            return
         domain = self.get_cookie_domain(app)
         path = self.get_cookie_path(app)
         full_session_key = self.key_prefix + session.sid
@@ -338,6 +342,8 @@ def open_session(self, app, request):
         return self.session_class(sid=sid, permanent=self.permanent)
 
     def save_session(self, app, session, response):
+        if not self.should_set_cookie(app, session):
+            return
         domain = self.get_cookie_domain(app)
         path = self.get_cookie_path(app)
         if not session:
@@ -422,6 +428,8 @@ def open_session(self, app, request):
         return self.session_class(sid=sid, permanent=self.permanent)
 
     def save_session(self, app, session, response):
+        if not self.should_set_cookie(app, session):
+            return
         domain = self.get_cookie_domain(app)
         path = self.get_cookie_path(app)
         store_id = self.key_prefix + session.sid