Remove old exposed secret token and use the one from CFG

11 years ago · 60c45e0b94
parent 1e57bee513
commit 60c45e0b94
1 changed files with 3 additions and 1 deletions
--- a/config/initializers/secret_token.rb
+++ b/config/initializers/secret_token.rb
@ -4,4 +4,6 @@
 # If you change this key, all old signed cookies will become invalid!
 # Make sure the secret is at least 30 characters and all random,
 # no regular words or you'll be exposed to dictionary attacks.
-AsciiIo::Application.config.secret_token = 'e43ff30a45b7552eee8da56ec764006dd67ae894e8f2ac7a334feb00a9b0f606e5fae9ff5e01d4fcccb567ac0401437fe351b2ef2c6c62217b85a398bf883797'
+
+# set secret token from the config object and use a default one for development
+AsciiIo::Application.config.secret_token = CFG['SECRET_TOKEN'] || '21deaa1a1228e119434aa783ecb4af21be7513ff1f5b8c1d8894241e5fc70ad395db72c8c1b0508a0ebb994ed88a8d73f6c84e44f7a4bc554a40d77f9844d2f4'