Generating a new token on Shares 1.9.2 or earlier on Windows

Description

If you are on Shares 1.9.2 or earlier it is strongly recommended to upgrade to 1.9.6 or to follow the instructions below for secret token generation.

Secret tokens are an instrumental part of creating secure cookies for your Shares site. Shares installations on Windows prior to 1.9.6 used hardcoded tokens and are therefore not adequately secure.

Instructions

Upgrading to Shares 1.9.6 fixes this issue automatically by generating a new, secure token for you.

If you cannot upgrade immediately, you can resolve this issue manually by doing the following:

1. Open a Command Prompt and run the following command:

C:\Shares\www\rake secret

2. Open the following file in a text editor:

  • C:\Shares\www\config\initializers\secret_token.rb

Find the Web::Application.config.secret_token setting and replace the value with the secret generated from the rake task.

Have more questions? Submit a request

0 Comments

Please sign in to leave a comment.
Powered by Zendesk