##// END OF EJS Templates
Added documentation about the session_path. #3968...
Eric Davis -
r3671:69d9600f48d8
parent child
Show More
@@ -1,27 +1,34
1 1 desc 'Generates a configuration file for cookie store sessions.'
2 2
3 3 file 'config/initializers/session_store.rb' do
4 4 path = File.join(RAILS_ROOT, 'config', 'initializers', 'session_store.rb')
5 5 secret = ActiveSupport::SecureRandom.hex(40)
6 6 File.open(path, 'w') do |f|
7 7 f.write <<"EOF"
8 8 # This file was generated by 'rake config/initializers/session_store.rb',
9 9 # and should not be made visible to public.
10 10 # If you have a load-balancing Redmine cluster, you will need to use the
11 11 # same version of this file on each machine. And be sure to restart your
12 12 # server when you modify this file.
13 13
14 14 # Your secret key for verifying cookie session data integrity. If you
15 15 # change this key, all old sessions will become invalid! Make sure the
16 16 # secret is at least 30 characters and all random, no regular words or
17 17 # you'll be exposed to dictionary attacks.
18 18 ActionController::Base.session = {
19 19 :session_key => '_redmine_session',
20 #
21 # Uncomment and edit the :session_path below if are hosting your Redmine
22 # at a suburi and don't want the top level path to access the cookies
23 #
24 # See: http://www.redmine.org/issues/3968
25 #
26 # :session_path => '/url_path_to/your/redmine/',
20 27 :secret => '#{secret}'
21 28 }
22 29 EOF
23 30 end
24 31 end
25 32
26 33 desc 'Generates a configuration file for cookie store sessions.'
27 34 task :generate_session_store => ['config/initializers/session_store.rb']
General Comments 0
You need to be logged in to leave comments. Login now