4 ms·
I wish Rails supported two secrets the way Rack::Cookie does by always signing with the first, but accepting either. That way you can rotate the secret without
by willlll 13y ago
I wish Rails supported two secrets the way Rack::Cookie does by always signing with the first, but accepting either. That way you can rotate the secret without signing everyone out.
- elithrar 13y agoI'm surprised that it doesn't? gorilla/sessions[1] does the same; and you can eventually remove your old keys provided you keep your expiry times sane. [1]: http://www.gorillatoolkit.org/pkg/sessions#NewCookieStore http://www.gorillatoolkit.org/pkg/sessions#NewCookieStore