Merge pull request stringer-rss#461 from maxmeyer/patch-2

Make SECRET_TOKEN random by default
isaiasmatewos · Sep 27, 2017 · d642b50 · d642b50
2 parents e2f49ed + 22b4ec2
commit d642b50
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/app.rb b/app.rb
@@ -9,6 +9,7 @@
 require "will_paginate/active_record"
 require "sprockets"
 require "sprockets-helpers"
+require "securerandom"
 
 require_relative "app/helpers/authentication_helpers"
 require_relative "app/repositories/user_repository"
@@ -33,7 +34,7 @@ class Stringer < Sinatra::Base
     set :root, File.dirname(__FILE__)
 
     enable :sessions
-    set :session_secret, ENV["SECRET_TOKEN"] || "secret!"
+    set :session_secret, ENV["SECRET_TOKEN"] || SecureRandom.hex(32)
     enable :logging
     enable :method_override