Skip to content

Commit

Permalink
chore(configuration): rake secret was deprecated do rails secret
Browse files Browse the repository at this point in the history
Seems like in the last rails versions 'secret' was moved to rails. See this post in StackOverflow for more info https://stackoverflow.com/questions/77855137/dont-know-how-to-build-task-secret
  • Loading branch information
conduct0 authored Mar 29, 2024
1 parent 74f8f08 commit 693fae3
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -101,7 +101,7 @@ Devise.setup do |config|
end
```

> **Important:** You are encouraged to use a secret different than your application `secret_key_base`. It is quite possible that some other component of your system is already using it. If several components share the same secret key, chances that a vulnerability in one of them has a wider impact increase. In rails, generating new secrets is as easy as `bundle exec rake secret`. Also, never share your secrets pushing it to a remote repository, you are better off using an environment variable like in the example.
> **Important:** You are encouraged to use a secret different than your application `secret_key_base`. It is quite possible that some other component of your system is already using it. If several components share the same secret key, chances that a vulnerability in one of them has a wider impact increase. In rails, generating new secrets is as easy as `rails secret`. Also, never share your secrets pushing it to a remote repository, you are better off using an environment variable like in the example.
Currently, HS256 algorithm is the one in use. You may configure a matching secret and algorithm name to use a different one (see [ruby-jwt](https://github.com/jwt/ruby-jwt#algorithms-and-usage) to see which are supported):

Expand Down

0 comments on commit 693fae3

Please sign in to comment.