Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make use of default key value when creating Rack::Session::Encryptor #35

Open
dentarg opened this issue Jan 17, 2024 · 0 comments
Open

Comments

@dentarg
Copy link
Contributor

dentarg commented Jan 17, 2024

This default value

RACK_SESSION = 'rack.session'

key: RACK_SESSION,

Isn't used when configuring the Encryptor class:

encryptor_opts = {
purpose: options[:key], serialize_json: options[:serialize_json]
}

use Rack::Session::Cookie and Rack::Session::Cookie, key: "rack.session" is the same, both give you a session cookie with key rack.session, but their signature will be different:

def compute_signature(data)
signing_data = data
signing_data += @options[:purpose] if @options[:purpose]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant