Revamped system for managing authentication tokens. - Every user has 1 token per client (web browser) - Tokens are rotated every 10 minutes New system migrates the old tokens to "legacy" tokens, so users still remain logged on. Also introduces weekly job to expire old auth tokens. |
||
|---|---|---|
| .. | ||
| 000-rails-master-polyfills.rb | ||
| 001-redis.rb | ||
| 002-freedom_patches.rb | ||
| 003-sql_builder.rb | ||
| 004-message_bus.rb | ||
| 005-site_settings.rb | ||
| 006-ensure_login_hint.rb | ||
| 006-mini_profiler.rb | ||
| 008-rack-cors.rb | ||
| 009-omniauth.rb | ||
| 010-discourse_iife.rb | ||
| 011-rack-protection.rb | ||
| 050-force_https.rb | ||
| 099-anon-cache.rb | ||
| 099-drain_pool.rb | ||
| 099-unicorn.rb | ||
| 100-i18n.rb | ||
| 100-logster.rb | ||
| 100-oj.rb | ||
| 100-onebox_options.rb | ||
| 100-quiet_logger.rb | ||
| 100-rails3_ar_after_commit_tests.rb | ||
| 100-secret_token.rb | ||
| 100-session_store.rb | ||
| 100-sidekiq.rb | ||
| 100-silence_logger.rb | ||
| 100-sprockets.rb | ||
| 100-strong_parameters.rb | ||
| 100-verify_config.rb | ||
| 100-watch_for_restart.rb | ||
| 100-wrap_parameters.rb | ||
| 200-message_bus_request_tracker.rb | ||