Discourse/discourse
Discourse/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-09-06 10:50:21 +08:00
Code Packages Activity Actions 9

fix secret_token init to always allow an override even if its too short

Browse source
This commit is contained in:
Sam 2013-08-29 15:27:01 +10:00
parent 2b1a140c9b
commit aaf41d227f
1 changed files with 7 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

5
config/initializers/secret_token.rb
View file

@ -1,10 +1,13 @@
# We have had lots of config issues with SECRET_TOKEN to avoid this mess we are moving it to redis # We have had lots of config issues with SECRET_TOKEN to avoid this mess we are moving it to redis
# if you feel strongly that it does not belong there use ENV['SECRET_TOKEN'] # if you feel strongly that it does not belong there use ENV['SECRET_TOKEN']
# #
token = ENV['SECRET_TOKEN'] || $redis.get('SECRET_TOKEN') token = ENV['SECRET_TOKEN']
unless token
token = $redis.get('SECRET_TOKEN')
unless token && token.length == 128 unless token && token.length == 128
token = SecureRandom.hex(64) token = SecureRandom.hex(64)
$redis.set('SECRET_TOKEN',token) $redis.set('SECRET_TOKEN',token)
end end
end
Discourse::Application.config.secret_token = token Discourse::Application.config.secret_token = token