Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update "Upgrading from Rails 5.1 to Rails 5.2" [ci skip] #32250

Conversation

bogdanvlviv
Copy link
Contributor

@bogdanvlviv bogdanvlviv commented Mar 14, 2018

Add section "Expiry in signed or encrypted cookie is now embedded in the cookies values"
to master since it should always be in the guides, not only for version 5.2.

Add info about config.action_dispatch.use_authenticated_cookie_encryption
to the "Configuring Rails Applications" guide.

It was committed straight to 5-2-stable since we don't need this
functionality in 6.0. Related to b25fcbc.

@rails-bot
Copy link

r? @schneems

(@rails-bot has picked a reviewer for you, use r? to override)

@bogdanvlviv bogdanvlviv force-pushed the add-info-about-exprity-of-siigned-cookies-to-upgrading-to-5-2 branch 5 times, most recently from abb30a9 to 1c1a6d1 Compare March 14, 2018 12:14
@@ -502,6 +502,9 @@ Defaults to `'signed cookie'`.
* `config.action_dispatch.cookies_rotations` allows rotating
secrets, ciphers, and digests for encrypted and signed cookies.

* `config.action_dispatch.use_authenticated_cookie_encryption` controls encrypted cookies to use AES-256-GC
authenticated encryption. It defaults to `true`.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Change to:

* `config.action_dispatch.use_authenticated_cookie_encryption` controls whether signed and encrypted cookies use the AES-256-GCM cipher or the older AES-256-CBC cipher. It defaults to true.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks. It is more clear.

Add section "Expiry in signed or encrypted cookie is now embedded in the cookies values"
to `master` since it should always be in the guides, not only for version 5.2.

Add info about `config.action_dispatch.use_authenticated_cookie_encryption`
to the "Configuring Rails Applications" guide.

It was committed straight  to `5-2-stable` since we don't need this
functionality in 6.0. Related to b25fcbc.
@bogdanvlviv bogdanvlviv force-pushed the add-info-about-exprity-of-siigned-cookies-to-upgrading-to-5-2 branch from 1c1a6d1 to c8a22bb Compare March 14, 2018 12:19
@pixeltrix pixeltrix merged commit b3b193f into rails:master Mar 14, 2018
@pixeltrix
Copy link
Contributor

Thanks @bogdanvlviv 👍

@bogdanvlviv bogdanvlviv deleted the add-info-about-exprity-of-siigned-cookies-to-upgrading-to-5-2 branch March 14, 2018 14:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants