What to do about default Rails session management?

[jocubeit]

I notice this gem doesn't act as a drop in replacement, i.e. ActiveRecord Session Store alternative. What do we do with existing Rails session management? For instance, the default Rails project will have:

# config/initialisers/ session_store.rb
Rails.application.config.session_store :cookie_store, key: '_my_app_session'

Would you remove ActionDispatch::Session::CookieStore Rack middleware?

Nice work btw.

[jocubeit]

I just did some research on ActionDispatch::Session::CookieStore. Apparently it must be set in order for ActionDispatch::Flash to work. So to answer my own question, what to about existing session management: do nothing, leave it in place so the things work as you expect them to in Rails.

[adamcooke]

I keep the Rails session storage around (usually a cookie store). As you say, it's useful for things like flash or other minor things you need to pop into a short lived session. Authie doesn't use it however. Authie stores a session ID in a cookie.