spec/demo/config/initializers/secret_token.rb in kojac-0.9.1 vs spec/demo/config/initializers/secret_token.rb in kojac-0.11.0
- old
+ new
@@ -1,7 +1,12 @@
# Be sure to restart your server when you modify this file.
-# Your secret key for verifying the integrity of signed cookies.
+# Your secret key is used for verifying the integrity of signed cookies.
# If you change this key, all old signed cookies will become invalid!
+
# Make sure the secret is at least 30 characters and all random,
# no regular words or you'll be exposed to dictionary attacks.
-Demo::Application.config.secret_token = '3be2230ff43ce08d0d092bb0050e18ea53b7b126638562adc66568ed6b2271e509faa11f898f999d9757ff38f67c13d861f2cb5fc325844b981f18babaa5267b'
+# You can use `rake secret` to generate a secure secret key.
+
+# Make sure your secret_key_base is kept private
+# if you're sharing your code publicly.
+Demo::Application.config.secret_key_base = 'ece58c951835d6cdcc9b1ce850d805e6651709d60f66329f0d62c2a8d2e26b4e73cfe5b34963b9f398bcdc4a6a50f30196a7402af2b5185706cf86746a75f908'