New Features in Rails 5.2

An introduction to new features in Rails 5.2: ActiveStorage, Credentials, ActiveSupport::CurrentAttributes, Redis Cache Store, CSP DSL, HTTP/2 Early Hints, Bootsnap

Transcript

1. New Features in Rails 5.2
   Michael Kohl
   
   Ruby Tuesday Bangkok, March 2018
   

   View Slide

2. • Michael Kohl (@citizen428)
   
   • CTO @ Lockstep Labs
   
   • Based in Bangkok, Thailand
   
   • Ruby developer since ~2004
   
   • Full-time Rails since Rails 2
   
   • Apparently still a teenager
   Ruby Tuesday March 2018
   locksteplabs.com
   Yours truly
   

   View Slide

3. Ruby Tuesday March 2018
   locksteplabs.com
   Outline
   • ActiveStorage
   
   • Credentials
   
   • ActiveSupport::CurrentAttributes
   
   • Redis Cache Store
   
   • Content-Security-Policy DSL
   
   • HTTP/2 Early Hints
   
   • Bootsnap
   

   View Slide

4. Ruby Tuesday March 2018
   locksteplabs.com
   ActiveStorage
   • File upload solution like Paperclip
   
   • Supports S3, GCS, Azure
   
   • Separate attachment/blob models
   
   • Supports variants (MiniMagick)
   
   • Mirroring possible
   
   • Direct upload
   

   View Slide

5. Ruby Tuesday March 2018
   locksteplabs.com
   ActiveStorage
   Demo time!
   

   View Slide

6. Ruby Tuesday March 2018
   locksteplabs.com
   Credentials
   • Secrets (config/secrets.yml)
   • Encrypted secrets (config/secrets.yml.enc)
   
   • Credentials (config/credentials.yml.enc)
   
   • Only one key to share
   
   • Production: RAILS_MASTER_KEY
   

   View Slide

7. Ruby Tuesday March 2018
   locksteplabs.com
   Credentials
   Demo time!
   

   View Slide

8. Ruby Tuesday March 2018
   locksteplabs.com
   ActiveSupport::CurrentAttributes
   [A] thread-isolated attributes
   singleton, which resets
   automatically before and after each
   request. This allows you to keep all
   the per-request attributes easily
   available to the whole system.
   

   View Slide

9. Ruby Tuesday March 2018
   locksteplabs.com
   ActiveSupport::CurrentAttributes
   Demo time!
   

   View Slide

10. Ruby Tuesday March 2018
    locksteplabs.com
    Redis Cache Store
    

    View Slide

11. Ruby Tuesday March 2018
    locksteplabs.com
    Content-Security-Policy
    “Content Security Policy (CSP) is an added
    layer of security that helps to detect and mitigate
    certain types of attacks, including Cross Site
    Scripting (XSS) and data injection attacks.”
    

    View Slide

12. Ruby Tuesday March 2018
    locksteplabs.com
    Content-Security-Policy
    config/initializers/content_security_policy.rb
    

    View Slide

13. Ruby Tuesday March 2018
    locksteplabs.com
    HTTP/2 Early Hints
    • RFC 8297 (draft status)
    
    • HTTP 103 Early Hints
    
    • HTTP/2
    
    • bin/puma —early-hints
    
    • Not currently supported by Heroku
    
    • H2O
    

    View Slide

14. Ruby Tuesday March 2018
    locksteplabs.com
    HTTP/2 Early Hints
    

    View Slide

15. Ruby Tuesday March 2018
    locksteplabs.com
    Bootsnap
    • Developed by Shopify
    
    • Boot large Ruby/Rails apps faster
    
    • Apps start 2-4x faster
    
    • Path Pre-Scanning
    
    • Compilation Caching
    

    View Slide

16. Ruby Tuesday March 2018
    locksteplabs.com
    Resources
    • ActiveStorage
    
    • ActiveSupport::EncryptedConfiguration
    
    • ActiveSupport::CurrentAttributes
    
    • ActiveSupport::Cache::RedisCacheStore
    
    • Content-Security-Policy
    
    • Early Hints RFC
    
    • Bootsnap
    

    View Slide