Make session_auth_name actually nullable

authl/flask.py

@@ -244,7 +244,7 @@ def __init__(self,
                  tester_path: str = None,
                  login_render_func: typing.Callable = None,
                  notify_render_func: typing.Callable = None,
-                 session_auth_name: str = 'me',
+                 session_auth_name: typing.Optional[str] = 'me',
                  force_https: bool = False,
                  stylesheet: typing.Union[str, typing.Callable] = None,
                  on_verified: typing.Callable = None,

tests/test_flask_wrapper.py

@@ -281,3 +281,24 @@ def initiate_auth(self, id_url, callback_uri, redir):
         assert response.headers['Location'] == 'http://localhost/'
         response = client.get('/')
         assert response.data == b'hello https://login.example/larry/auth'
+
+
+def test_session_override():
+    app = flask.Flask(__name__)
+    app.secret_key = 'poiu'
+
+    stash = {}
+
+    def on_verified(disp):
+        stash['v'] = disp
+
+    authl.flask.setup(app,
+                      {'TEST_ENABLED': True},
+                      session_auth_name=None,
+                      on_verified=on_verified)
+
+    with app.test_client() as client:
+        client.get('/login/?me=test:poiu')
+        assert 'me' not in flask.session
+        assert isinstance(stash['v'], disposition.Verified)
+        assert stash['v'].identity == 'test:poiu'