{
  "slug": "flask-session-decode",
  "name": "gizza-ai/flask-session-decode",
  "version": "0.1.0",
  "title": "Flask Session Cookie Decoder — Decode itsdangerous Sessions — gizza.ai",
  "description": "Decode a Flask session cookie (itsdangerous) into readable JSON without the secret key — base64url, zlib payloads, signature timestamp. Free, in your browser.",
  "tags": [
    "flask session decoder",
    "itsdangerous",
    "session cookie",
    "decode flask cookie",
    "flask cookie decoder",
    "base64url",
    "session debugging",
    "python flask"
  ],
  "category": "developer",
  "urls": {
    "page": "https://gizza.ai/tools/flask-session-decode/",
    "markdown": "https://gizza.ai/tools/flask-session-decode/index.md",
    "descriptor": "https://gizza.ai/tools/flask-session-decode/tool.json",
    "deep_link_example": "https://gizza.ai/tools/flask-session-decode/?input=eyJ1c2VyIjoiYWxpY2UifQ.aQ7n_A.signature%20%20%28or%20paste%20a%20full%20session%3D...%20cookie%29"
  },
  "cli": "gizza tool flask-session-decode 'input=eyJ1c2VyIjoiYWxpY2UifQ.aQ7n_A.signature  (or paste a full session=... cookie)'",
  "tool": {
    "description": "Decode a Flask / itsdangerous session cookie into readable JSON WITHOUT the SECRET_KEY. Base64url-decodes the payload (inflating a '.'-prefixed zlib payload), parses it as JSON, and converts the itsdangerous timestamp to a Unix time + ISO-8601 UTC string. The signature is reported but not verified. Returns {payload, compressed, timestamp, timestamp_iso, signature, signature_verified}.",
    "parameters": {
      "additionalProperties": false,
      "properties": {
        "cookie": {
          "description": "The Flask session cookie value (bare or full 'session=...' fragment).",
          "type": "string"
        }
      },
      "required": [
        "cookie"
      ],
      "type": "object"
    }
  }
}