Edit Question - KnowledgeHub

Title Body

Can someone point out what the new Rails 3.x session configuration options are? I'm trying to duplicate the same configuration that I have in my Rails 2.3.x application. This is the configuration that I used in the application: #environment.rb config.action_controller.session_store = :active_record_store config.action_controller.session = { :key => '_something', #non-secure for development :secret => 'really long random string' } # production.rb - override environment.rb for production config.action_controller.session = { :key => '_something_secure', :secret => 'really long random string', :expire_after => 60*60,#time in seconds :secure => true #The session will now not be sent or received on HTTP requests. } However, in Rails 3.x, I can only find mention of the following: AppName::Application.config.session_store :active_record_store AppName::Application.config.secret_token = 'really long random string' AppName::Application.config.cookie_secret = 'another really long random string' Are there other config settings to control the key, expire_after time, and secure option? Regarding the latter, if "config.force_ssl = true" is set in production.rb, I assume the secure option is no longer required? Thanks very much!

Tags (comma-separated) Cancel