secret_token is not available in Rails 6 anymore, it was removed in favor of secret_key_base.
With this PR, we adopt secret_key_base as the pepper when it's available, ensuring compatibility with Rails 6. secret_token is still used when available, in order to avoid breaking authentication for existing apps.
secret_token
is not available in Rails 6 anymore, it was removed in favor ofsecret_key_base
.With this PR, we adopt
secret_key_base
as the pepper when it's available, ensuring compatibility with Rails 6.secret_token
is still used when available, in order to avoid breaking authentication for existing apps.