2013-08-20 17:09:42 +10:00
|
|
|
# We have had lots of config issues with SECRET_TOKEN to avoid this mess we are moving it to redis
|
|
|
|
|
# if you feel strongly that it does not belong there use ENV['SECRET_TOKEN']
|
2013-02-20 20:32:32 -05:00
|
|
|
#
|
2013-08-29 15:27:01 +10:00
|
|
|
token = ENV['SECRET_TOKEN']
|
|
|
|
|
unless token
|
|
|
|
|
token = $redis.get('SECRET_TOKEN')
|
|
|
|
|
unless token && token.length == 128
|
|
|
|
|
token = SecureRandom.hex(64)
|
|
|
|
|
$redis.set('SECRET_TOKEN',token)
|
|
|
|
|
end
|
2013-02-18 17:34:43 +11:00
|
|
|
end
|
|
|
|
|
|
2013-08-20 17:09:42 +10:00
|
|
|
Discourse::Application.config.secret_token = token
|
