Secure Session Plugin


This is a Trac plugin to lock an authenticated user into using https://.

Bugs/Feature Requests

Existing bugs and feature requests for SecSessionPlugin are here.

If you have any issues, create a new ticket.


2 / 2


0 / 1


Download the zipped source from here.


You can check out SecSessionPlugin from here using Subversion, or browse the source with Trac.


General instructions on installing Trac plugins can be found on the TracPlugins page.


Requires setup in your trac.ini file as follows:

secsession.* = enabled

The web server must also be configured to only allow access to the login url via https. An example rewrite rule for apache might look like the following:

RewriteEngine On
RewriteRule ^/login https://%{SERVER_NAME}/login [L]

Recent Changes

15942 by cboos on 2016-11-06 13:35:45
WikiExtrasPlugin: make the plugin compatible with Trac's jinja2 branch.

This is mainly about replacing the direct Genshi imports with indirect
ones. By going through trac.util.html, we can work with a broad
range of older Trac versions (at least 0.12.x to 1.2.x) and yet be
compatible with future versions which won't require Genshi anymore.

The one compatibility fix which was not trivial was a
re-implementation of the tracwikiextras.util.sanitize_attrib
function in terms of the (new) TracHTMLSanitizer.sanitize_attrs

15941 by cboos on 2016-11-05 21:21:57
TracWikiExtras: add a lbox WikiProcessor, like rbox but aligns to the left side.
15264 by rjollos on 2016-02-11 05:22:34
Remove unnecessary svn:mime-type on py files

svn:mime-type was set to "plain" for many files.



Author: pacopablo
Maintainer: none (needsadoption)
Contributors: csabahenk?


This works great and is very useful (I'm using it with trac 0.9.5), just one issue I'd like to know if anyone has found a workaround for: normally in trac when you click on "login", after the login you stay on the page you were on. With the suggested setup here people always get moved to the base of the wiki. Anyone found a way to get back to the original trac behavior?

I'd like to know if it works with tracd, too.

Last modified 12 months ago Last modified on Nov 30, 2015, 9:44:39 AM