2013-08-20 15:09:42 +08:00
|
|
|
# We have had lots of config issues with SECRET_TOKEN to avoid this mess we are moving it to redis
|
|
|
|
|
# if you feel strongly that it does not belong there use ENV['SECRET_TOKEN']
|
2013-02-21 09:32:32 +08:00
|
|
|
#
|
2013-08-29 13:27:01 +08:00
|
|
|
token = ENV['SECRET_TOKEN']
|
|
|
|
|
unless token
|
|
|
|
|
token = $redis.get('SECRET_TOKEN')
|
|
|
|
|
unless token && token.length == 128
|
|
|
|
|
token = SecureRandom.hex(64)
|
|
|
|
|
$redis.set('SECRET_TOKEN',token)
|
|
|
|
|
end
|
2013-02-18 14:34:43 +08:00
|
|
|
end
|
|
|
|
|
|
2013-08-20 15:09:42 +08:00
|
|
|
Discourse::Application.config.secret_token = token
|
