eBooru/config/initializers/secret_token.rb

# frozen_string_literal: true

require File.expand_path('../../state_checker', __FILE__)

StateChecker.instance.check!

Rails.application.config.action_dispatch.session = {
  :key    => '_danbooru2_session',
  :secret => StateChecker.instance.session_secret_key
}
Rails.application.config.secret_key_base = StateChecker.instance.secret_token
[RuboCop] Enable `Style/FrozenStringLiteralComment` This reduces allocations on the posts page by about 5%, from basic testing 2024-02-25 12:15:55 -05:00			`# frozen_string_literal: true`

Major revamp of security. Passwords are first SHA1 hashed and then that hash is bcrypted. Bcrypted hashes are stored in a new column on users. This separate column is only to allow for rollbacks, eventually the old SHA1 hash column will be removed. Sensitive cookie details are now encrypted to prevent user tampering and more stringent checks on secret_token and session_secret_key are enforced. 2013-03-04 22:55:41 -05:00			`require File.expand_path('../../state_checker', __FILE__)`
sync 2010-08-18 18:44:18 -04:00
fix for statechecker 2017-01-24 16:32:08 -05:00			`StateChecker.instance.check!`
add alt source for secret token 2013-01-14 15:11:53 -05:00
fixes #2133 2014-04-14 17:32:01 -04:00			`Rails.application.config.action_dispatch.session = {`
Major revamp of security. Passwords are first SHA1 hashed and then that hash is bcrypted. Bcrypted hashes are stored in a new column on users. This separate column is only to allow for rollbacks, eventually the old SHA1 hash column will be removed. Sensitive cookie details are now encrypted to prevent user tampering and more stringent checks on secret_token and session_secret_key are enforced. 2013-03-04 22:55:41 -05:00			`:key => '_danbooru2_session',`
fix for statechecker 2017-01-24 16:32:08 -05:00			`:secret => StateChecker.instance.session_secret_key`
Major revamp of security. Passwords are first SHA1 hashed and then that hash is bcrypted. Bcrypted hashes are stored in a new column on users. This separate column is only to allow for rollbacks, eventually the old SHA1 hash column will be removed. Sensitive cookie details are now encrypted to prevent user tampering and more stringent checks on secret_token and session_secret_key are enforced. 2013-03-04 22:55:41 -05:00			`}`
switch from secret_token to secret_key_base 2018-05-15 18:34:53 -04:00			`Rails.application.config.secret_key_base = StateChecker.instance.secret_token`