You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Aug 6, 2024. It is now read-only.
The intention is good that static strings should not be used as session secrets and they should be crypto strings. But since changes hot reload the server, the session secret gets reset between hot reloads and forces the user to login again into their Admin UI for every single change during development. We should either figure out how to persist the session secret during hot reloads or revert back to the previous approach of using static string as a secret.
The text was updated successfully, but these errors were encountered:
flexdinesh
changed the title
Session secret should be static between hot reloads
Session secret should remain the same between hot reloads
Oct 21, 2022
Sign up for freeto subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Session secret was recently changed from static to dynamic.
The intention is good that static strings should not be used as session secrets and they should be crypto strings. But since changes hot reload the server, the session secret gets reset between hot reloads and forces the user to login again into their Admin UI for every single change during development. We should either figure out how to persist the session secret during hot reloads or revert back to the previous approach of using static string as a secret.
The text was updated successfully, but these errors were encountered: