Skip to content

Commit f014802

Browse files
authored
Merge pull request rails#47723 from kinduff/patch-1
Add context when changing secret_key_base
2 parents 2fc77e4 + 7a12fa1 commit f014802

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

guides/source/security.md

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -115,7 +115,14 @@ In test and development applications get a `secret_key_base` derived from the ap
115115
secret_key_base: 492f...
116116
```
117117
118-
WARNING: If your application's secrets may have been exposed, strongly consider changing them. Changing `secret_key_base` will expire currently active sessions.
118+
WARNING: If your application's secrets may have been exposed, strongly consider
119+
changing them. Note that changing `secret_key_base` will expire currently active
120+
sessions and require all users to log in again. In addition to session data, the
121+
following things may also be affected:
122+
123+
* Encrypted cookies
124+
* Signed cookies
125+
* Active Storage Files
119126

120127
### Rotating Encrypted and Signed Cookies Configurations
121128

0 commit comments

Comments
 (0)