Why was session_store.rb removed in Rails 5.1?

Rails 5.1 deletes the file config/initializers/session_store.rb

. the upgrade manual does not mention this. Can someone explain why it was removed and what should we do with our existing file? My current file looks like this:

Rails.application.config.session_store(
  :cookie_store,
  :key => '_foo_session', # any value
  :secure => Rails.env.production? || Rails.env.staging?, # Only send cookie over SSL when in production and staging
  :http_only => true # Don't allow Javascript to access the cookie (mitigates cookie-based XSS exploits)
)

      

+3


source to share





All Articles