search

openaustralia / righttoknow

Theme for, and issues specific to, Right To Know.
https://www.righttoknow.org.au/
MIT License
21 stars 14 forks source link

0.28.0.1 - Rails 4.0 - Signed Cookies Changes #738

Closed benrfairless closed 3 years ago

benrfairless commented 3 years ago

Rails 4.0 introduces ActiveSupport::KeyGenerator and uses this as a base from which to generate and verify signed cookies (among other things). Generate a secret with bundle exec rake secret and use this for the value of SECRET_KEY_BASE in config/general.yml.

benrfairless commented 3 years ago

As of 0.29.0.0 The COOKIE_STORE_SESSION_SECRET config item has been removed and replaced with SECRET_KEY_BASE. You should migrate the original value to the new config key.