The intention is good that static strings should not be used as session secrets and they should be crypto strings. But since changes hot reload the server, the session secret gets reset between hot reloads and forces the user to login again into their Admin UI for every single change during development. We should either figure out how to persist the session secret during hot reloads or revert back to the previous approach of using static string as a secret.
Session secret was recently changed from static to dynamic.
The intention is good that static strings should not be used as session secrets and they should be crypto strings. But since changes hot reload the server, the session secret gets reset between hot reloads and forces the user to login again into their Admin UI for every single change during development. We should either figure out how to persist the session secret during hot reloads or revert back to the previous approach of using static string as a secret.