Invalidate an old session in Flask
If you have security concerns (and everyone should have) There is the answer:
This is not REALLY possible
Flask uses cookie-based sessions. When you edit or delete session, you send a REQUEST to CLIENT to remove the cookie, normal clients (browsers) will do. But if session hijacked by an attacker, the attacker's session remains valid.
How do I create a new clean session and invalidate the current one in Flask?
Do I use make_null_session() or open_session()?