Update documentation #7
Conversation
|
ping @pedelman @philipmuir |
| * Edit `.env`: | ||
| * Set `BC_CLIENT_ID` and `BC_CLIENT_SECRET` to the values obtained from Developer Portal. | ||
| * Set `APP_URL` to `https://<app hostname>` | ||
| * Set `SESSION_SECRET` to a long random string |
There was a problem hiding this comment.
rake secret generates a string of the right length/from a crypto secure random source, probably worthwhile mentioning it here
There was a problem hiding this comment.
This project doesn't have rake, and I believe rake secret is a Rails thing, but this is a Sinatra app.
There was a problem hiding this comment.
date | md5 | shasum | base64There was a problem hiding this comment.
How about ruby -e "require 'securerandom'; puts SecureRandom.hex"?
There was a problem hiding this comment.
true :(
date and md5 should not be used in a production it's predictable, something generated using dev/urandom based on openssl lib, or ruby's SecureRandom since the secret is used to sign/validate cookies
There was a problem hiding this comment.
ruby -e "require 'securerandom'; puts SecureRandom.hex(64)"
|
🔨 |
No description provided.