Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Gotanda.rb#56
Search
Masayuki Mizuno
December 20, 2023
0
68
Gotanda.rb#56
Masayuki Mizuno
December 20, 2023
Tweet
Share
More Decks by Masayuki Mizuno
See All by Masayuki Mizuno
3/14なので円周率を計算する
fetburner
0
250
ネットワーク機器の中の OCaml
fetburner
0
600
遅延評価を使ってOSSのバグを修正した話
fetburner
1
140
Featured
See All Featured
Intergalactic Javascript Robots from Outer Space
tanoku
266
26k
Distributed Sagas: A Protocol for Coordinating Microservices
caitiem20
323
20k
Adopting Sorbet at Scale
ufuk
69
8.6k
Stop Working from a Prison Cell
hatefulcrawdad
266
19k
Into the Great Unknown - MozCon
thekraken
15
1.1k
ReactJS: Keep Simple. Everything can be a component!
pedronauck
660
120k
In The Pink: A Labor of Love
frogandcode
138
21k
GitHub's CSS Performance
jonrohan
1025
450k
Unsuck your backbone
ammeep
664
57k
Music & Morning Musume
bryan
41
5.6k
Optimizing for Happiness
mojombo
370
69k
Building a Scalable Design System with Sketch
lauravandoore
457
32k
Transcript
© 2023 Wantedly, Inc. Rails 7.0 ΞοϓάϨʔυͰ ηογϣϯཧ͕յΕͨ Dec. 20
2023 - ਫ խ೭
ࠓ͢͜ͱ © 2023 Wantedly, Inc.
ࠓ͢ࣄ • ֤ϚΠΫϩαʔϏεͰผݸʹ CookieStore ΛͬͨηογϣϯཧΛߦ͏ϚΠΫϩ αʔϏεΞʔΩςΫνϟ © 2023 Wantedly, Inc.
Rails 7.0 ΞοϓσʔτͰηογϣϯཧ͕յΕͨ https://www.wantedly.com/companies/wantedly/post_articles/466117 ΞʔΩςΫνϟ࣍ୈͰਂࠁͳӨڹ͕ग़Δ߹͕͋Δ
Կ͕ى͖ͨͷ͔ © 2023 Wantedly, Inc.
Կ͕ى͖ͨͷ͔ ϑΥʔϜࣗಈೖྗϘλϯ͕ಈ࡞͠ͳ͘ͳͬͨ © 2023 Wantedly, Inc. • 2022ͷ2݄͝Ζ
ى͖͍ͯͨΤϥʔ ϑΥʔϜදࣔ࣌ʹউखʹϩάΠϯঢ়ଶ͕ղআ͞ΕΔ © 2023 Wantedly, Inc. • ग़୫ͳ CookieStore ηογϣϯͰ্ॻ͖͞Εͯ͠·͏
ݪҼͷௐࠪ © 2023 Wantedly, Inc.
എܠ: Wantedly ͷΞʔΩςΫνϟ ೝূ༻ͷϚΠΫϩαʔϏεͱɺΤϯτϦʔϑΥʔϜ༻ͷ ϚΠΫϩαʔϏε͕ผΕ͍ͯΔ • ֤ϚΠΫϩαʔϏεͰผݸʹ CookieStore ηογϣϯΛݕূ͍ͯ͠Δ ©
2023 Wantedly, Inc. ೝূ༻ϚΠΫϩαʔϏε ϑΥʔϜ༻ϚΠΫϩαʔϏε ೝূཁٻ ηογϣϯใ ϑΥʔϜೖྗཁٻ + ηογϣϯใ ϑΥʔϜใ ηογϣϯݕূ CookieStore ҉߸༻ڞ༗伴Λڞ༗
ೝূʹࣦഊͨ͠ݪҼͷௐࠪ CookieStore ηογϣϯͷ෮߸ʹࣦഊ • ೝূ༻ϚΠΫϩαʔϏεͷੜͨ͠ηογϣϯ͕ɺϑΥʔϜ༻ϚΠΫϩαʔϏεʹෆ ਖ਼ͳͷͱͯ͠ѻΘΕͨ © 2023 Wantedly, Inc.
ೝূ༻ϚΠΫϩαʔϏε ϑΥʔϜ༻ϚΠΫϩαʔϏε ೝূཁٻ ηογϣϯใ ϑΥʔϜೖྗཁٻ + ηογϣϯใ ೝূΤϥʔ ηογϣϯݕূʹ ࣦഊ
CookieStore ηογϣϯ෮߸ʹࣦഊͨ͠ݪҼͷௐࠪ ηογϣϯ෮߸ͷͨΊͷڞ༗伴͕৯͍ҧ͍ͬͯͨ © 2023 Wantedly, Inc.
എܠ: ڞ༗伴ੜͷΞϧΰϦζϜ secret_key_base + ιϧτʹϋογϡؔΛ܁Γฦ͠ద༻ • PBKDF2-HMAC • ૯ͨΓ߈ܸରࡦͷͨΊʹܭࢉΛॏ͍ͯ͘͠Δʢ͍ΘΏΔετϨονϯάʣ ©
2023 Wantedly, Inc. ϋογϡؔʢSHA256ʣ secret_key_base + ιϧτ ڞ༗伴 KeyGenerator
Τϥʔͷى͖ͨݪҼ Rails 7.0 ͔ΒσϑΥϧτͰڞ༗伴ੜʹ༻͍Δ ϋογϡ͕ؔมߋ͞Εͨ © 2023 Wantedly, Inc. SHA-1
SHA-256 secret_key_base + ιϧτ ڞ༗伴 ҟͳΔڞ༗伴 KeyGenerator
ͷमਖ਼ © 2023 Wantedly, Inc.
Ұ࣌ରԠ ڞ༗伴ੜʹ༻͍ΔϋογϡؔͷઃఆΛͨ͠ © 2023 Wantedly, Inc. • SHA-1 ࣌ΕͳͷͰɺ͓͍͓͍ SHA-256
ʹΞοϓσʔτ͍ͨ͠ • ԁͳҠߦʹϩʔςʔλ͕ඞཁ
·ͱΊ © 2023 Wantedly, Inc.
·ͱΊ • ֤ϚΠΫϩαʔϏεͰผݸʹ CookieStore ΛͬͨηογϣϯཧΛߦ͏ϚΠΫϩ αʔϏεΞʔΩςΫνϟ © 2023 Wantedly, Inc.
Rails 7.0 ΞοϓσʔτͰηογϣϯཧ͕ӨڹΛड͚Δ https://www.wantedly.com/companies/wantedly/post_articles/466117 ΞʔΩςΫνϟ࣍ୈͰਂࠁͳӨڹ͕ग़Δ߹͕͋Δ