search

theodi / uk-postcodes

MIT License
41 stars 17 forks source link

Obfuscates production secret_token by moving to ENV variable. Fixes #9 #10

Closed cblanc closed 10 years ago

cblanc commented 10 years ago

My proposed fix to hide secret_token by default in production. Taken from this blog post here

I'd also recommend adding the Dotenv gem to more easily manage ENV in production. Setting the secret_token in production would be a simple matter of creating a .env file (not in version control) in RAILS_ROOT and appending it with the secret token e.g.

SECRET_TOKEN=randomstring....
cblanc commented 10 years ago

Looks like it's been done. Great!

pezholio commented 10 years ago

Yeah, just waiting for the tests to pass and deploy to happen, but thanks for the heads up! :+1:

I'll close your PR, as I wanted to add Dotenv etc too. Thanks again!