- Created a rake task to generate secret keys. This forces you to run rake secret to generate the keys if you have the plugin installed.
- Updated the code to support the newly generated secret keys, as well as some DRY-ing up of the code.
Opensource Friday updates
January 25th, 2008
I just updated the EncryptedCookieStore plugin. I had a couple of suggestions so I went ahead and implemented them. Here is a list of updates.
2 Responses to “Opensource Friday updates”
Sorry, comments are closed for this article.
Looks good. The only suggestion I would make is to have an option for the rake task so that it can write to a config file under the rails config/ dir instead of within the plugin dir itself. I frequently blow away plugins in the vendor/plugins dir when they are updated and it would be best not to have to worry about throwing away my config as well. Another benefit of storing the keys as config in either environment.rb or one of the individual environment files is that I can have different keys for different environments if there would be a reason to do so. Just one guys opinion. :-) Sadly, I had to remove the plugin from the app I am working on today as I added OpenID Auth support on top of restful_authentication and the bloat in session cookie size due to the encryption (seems like 2x+ size to the naked eye) threw cookie size too big exceptions as soon as I tried to use it (without storing any actual application data in the cookie, just whatever was being set as part of the openid transaction). Once I removed the encryption from the cookies and fell back to standard base64 cookie store all was well again. Any changes that could be made to use an encryption algorithm that does not dramatically change the size of the cookie? Getting it smaller would be beneficial to user experience, server bandwidth, and allow more data to be stored before exceptions get thrown. Now I have to decide whether I can live with base64 cookies, or if I'll have to go back to DB cookie store. :-/ Cheers. Glenn
January 25th, 2008 at 05:23 PM
I am planning several more iterations of development on this plugin to get it proper. I will keep posting progress as I get more complete. Feel free to visit the Relevance open source trac at http://opensource.thinkrelevance.com
January 26th, 2008 at 04:57 PM