5 ms·
The way, we've solved this is to default to a hard-coded secret if the environment doesn't have it. App::Application.config.secret_token = ENV['COOKIE_SECR
by wolframarnold 13y ago
The way, we've solved this is to default to a hard-coded secret if the environment doesn't have it.
App::Application.config.secret_token = ENV['COOKIE_SECRET'] || '<default secret>'
Secured environments like production get their own secret. Developer machines can use the default w/o additional overhead.