Rails Session: How it works?

rubyonrails-talk
1

Hello All,

I would need someone to explain to me how Rails session works? I need all the options available and tricks (if any).

Regards, Emeka

2

It’s pretty tough to answer such a vague question. What about the Guide didn’t help you? http://guides.rubyonrails.org/security.html

3

Hello Jim,

Thanks for that link. However, I would want to know how it is accomplished? is it cookie based? And which algorithm is used to generate the random object?

Emeka

4

Yes, a session is cookie-based.

If you want to find out every single little detail, just read the Rails codebase. That’s the great thing about opensource, isn’t it?

Best regards

Peter De Berdt

5

Thanks so much.

However, I am using the so-called cookieStore.

session[:user_id] = user.id

Will this be saved at the client? Will the client see the user.id?

What is saved at the client? And how is the server relates to that?

Emeka

6

These questions are all answered in the first few paragraphs of the 'Session' section of 'Action Controller Overview' guide:

and there is more detail along with security recommendations in the Security Guide:

Chris

7

Thanks you all.

Emeka