Hacker News new | ask | show | jobs
by wolframarnold 4774 days ago
The way, we've solved this is to default to a hard-coded secret if the environment doesn't have it.

    App::Application.config.secret_token = ENV['COOKIE_SECRET'] || '<default secret>'
Secured environments like production get their own secret. Developer machines can use the default w/o additional overhead.