In secret_token.rb under rails initializers, there is secret token appearing as a string of random chars and numbers which must be 30 chars or longer. For max security, does this secret token have to be unique for each and every rails app deployed? We plan to use a rails template which may have the same secret token for every app developed from the same template. Thanks so much.
In secret_token.rb under rails initializers, there is secret token appearing as a string of
Share
Yesterday I was reading an article about security, and I believe it is important to ensure the uniqueness of your secret_token.
You can use any previous project as template (everybody does that), but for security reasons you should generate a new secret_token.
In this article, they explain how to generate a new secret_token through the vegas-gem. I haven’t tried yet….
Also take a look in the links below:
I Hope it helps…