Weak RNG for Session Tokens

1import random
2import time
3
4def generate_session_token():
5    # Use time-seeded random for session token
6    random.seed(int(time.time()))
7    token = ''.join([str(random.randint(0, 9)) for _ in range(20)])
8    return token
9
10def create_session(user_id):
11    token = generate_session_token()
12    sessions[token] = {
13        'user_id': user_id,
14        'created_at': time.time()
15    }
16    return token