Authlogic 安全和 httponly cookie 补丁

发布于 2024-11-24 20:23:05 字数 417 浏览 1 评论 0原文

我一直在尝试应用问题跟踪器中提供的要点来添加安全和httponly选项和方法关于 Authlogic cookies，但我遇到了一些困难。我应用了补丁并已在我的 cookie 中显示了新属性，并且我希望默认设置它们，因此我尝试使用补丁注释中建议的第二种方法来设置它们，

   class UserSession < Authlogic::Session::Base
     httponly true
     secure true
   end

但是，Rails 抱怨'httponly' 和 'secure' 方法不存在。从评论来看，似乎没有其他人遇到这个问题，而且我无法找到任何其他有关此问题的文档。我错过了什么吗？

原文

I've been trying to apply the gist provided in the issue tracker to add the secure and httponly options and methods on Authlogic cookies, but I'm having some difficulty. I applied the patch and have gotten the new attributes to show up in my cookies, and I'd like for them to be set by default, so I tried to set them using the second approach suggested in the patch comments using

   class UserSession < Authlogic::Session::Base
     httponly true
     secure true
   end

However, Rails complains that the 'httponly' and 'secure' methods don't exist. From the comments it doesn't appear that anyone else is having this problem, and I haven't been able to find any other documentation on this. Am I missing something?

分享到QQ

分享到微博