67 文字
1 分
Railsでsessionを無効化する方法
config/initializers/session_store.rbにRails.application.config.session_store :disabledを書き込んでアプリケーションサーバを再起動。
echo "Rails.application.config.session_store :disabled" > config/initializers/session_store.rb検証
Ruby on Rails 7.0で検証。Rails 3からこの方法でできるっぽい。
before
% curl -v http://localhost:3001/ 2>&1 |grep -i cookie< Set-Cookie: _train_session=9zmzzmUN5C%2FawwJc1xfMyQCNdWwVgoyQ4HeSgjCvK3tFdYR47cYGiKusOjIIL1goxvO3vhUazqJYtwUcQcWUGXjueOQLOyy89TOJ%2BpPgZOwcr1iFNsEXXxg4Mvt%2Be8IaCWilq7EmBn3q3r2DiK4TcfaS%2FKw9Qs3qNe6GftE%2BlYprxg3r9esCOkyVPva3OLw08IZOtgtvzcyyC6zbtTlBZ7lX9OV0E3ngUU8a5XdcFJ2bBzmKk4W6DAvIGrqOvza%2Bb7eUgWv60YdOJb5LWUkc9B3gmFz1AA%3D%3D--Zqf%2B2sbFYn7PYeMM--LPCwaBZ27oJWCKVb4lpuQA%3D%3D; path=/; HttpOnly; SameSite=Lax%after
% curl -v http://localhost:3001/ 2>&1 |grep -i cookie% Railsでsessionを無効化する方法
https://blog.teraren.com/posts/disable-session-on-rails/