Rails:弃用警告:您没有设置 config.secret_key_base [英] Rails: DEPRECATION WARNING: You didn't set config.secret_key_base

问题描述

我在运行规范时收到此警告.是否有生成 secret_key_base 的最佳实践，或者任何字符串都足够(关于安全问题)?

I receive this warning when running my specs. Is there a best practice for generating a secret_key_base, or will any string suffice (with regard to security concerns)?

推荐答案

您可能从 3.x 或以前的版本升级到 Rails 4.

You propably upgraded to Rails 4 from a 3.x or a previous version.

首先生成一个随机密钥值:

First generate a random secret key value:

$ bundle exec rake secret

然后获取该值并将其放入config/initializers/secret_token.rb:

Then take that value and put it in config/initializers/secret_token.rb:

YourApp::Application.config.secret_key_base = 'your-secret'

将 YourApp 替换为您的应用程序名称.

replacing YourApp with the name of your application.

原因在此处进行了解释.

另见http://guides.rubyonrails.org/upgrading_ruby_on_rails.html#配置秘密-yml

这篇关于Rails:弃用警告:您没有设置 config.secret_key_base的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！