heartcombo / devise

Flexible authentication solution for Rails with Warden.
http://blog.plataformatec.com.br/tag/devise/
MIT License
24.01k stars 5.55k forks source link

Allow `skip_session_storage` while still writing Rememberable's cookie #5724

Open theblang opened 3 weeks ago

theblang commented 3 weeks ago

Environment

Current behavior

Setting config.skip_session_storage (in my case, to skip :params_auth) will also prevent Rememberable from writing the remember_token and creating its cookie.

Expected behavior

It seems as though we shouldn't need session state if we're using Rememberable's cookie? This is a problem for us due to the issue talked about here.