Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Gotanda.rb#56
Search
Masayuki Mizuno
December 20, 2023
0
130
Gotanda.rb#56
Masayuki Mizuno
December 20, 2023
Tweet
Share
More Decks by Masayuki Mizuno
See All by Masayuki Mizuno
Omotesando.rb #110
fetburner
0
140
Continuation is to be continued
fetburner
1
1.5k
callccの実装を読む
fetburner
0
180
RubyでSlackのbotを作ろう
fetburner
0
160
継続オペレータの話
fetburner
0
230
Rubyでリストモナドを使う
fetburner
0
180
次世代のプロファイラVernierを試す
fetburner
0
120
数値計算とメモリ最適化
fetburner
0
240
3/14なので円周率を計算する
fetburner
0
400
Featured
See All Featured
Raft: Consensus for Rubyists
vanstee
140
7.2k
How To Stay Up To Date on Web Technology
chriscoyier
791
250k
Distributed Sagas: A Protocol for Coordinating Microservices
caitiem20
333
22k
Git: the NoSQL Database
bkeepers
PRO
431
66k
Let's Do A Bunch of Simple Stuff to Make Websites Faster
chriscoyier
508
140k
Agile that works and the tools we love
rasmusluckow
331
21k
Intergalactic Javascript Robots from Outer Space
tanoku
273
27k
GitHub's CSS Performance
jonrohan
1032
470k
VelocityConf: Rendering Performance Case Studies
addyosmani
332
24k
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
panda_program
115
20k
Building Better People: How to give real-time feedback that sticks.
wjessup
369
20k
GraphQLの誤解/rethinking-graphql
sonatard
73
11k
Transcript
© 2023 Wantedly, Inc. Rails 7.0 ΞοϓάϨʔυͰ ηογϣϯཧ͕յΕͨ Dec. 20
2023 - ਫ խ೭
ࠓ͢͜ͱ © 2023 Wantedly, Inc.
ࠓ͢ࣄ • ֤ϚΠΫϩαʔϏεͰผݸʹ CookieStore ΛͬͨηογϣϯཧΛߦ͏ϚΠΫϩ αʔϏεΞʔΩςΫνϟ © 2023 Wantedly, Inc.
Rails 7.0 ΞοϓσʔτͰηογϣϯཧ͕յΕͨ https://www.wantedly.com/companies/wantedly/post_articles/466117 ΞʔΩςΫνϟ࣍ୈͰਂࠁͳӨڹ͕ग़Δ߹͕͋Δ
Կ͕ى͖ͨͷ͔ © 2023 Wantedly, Inc.
Կ͕ى͖ͨͷ͔ ϑΥʔϜࣗಈೖྗϘλϯ͕ಈ࡞͠ͳ͘ͳͬͨ © 2023 Wantedly, Inc. • 2022ͷ2݄͝Ζ
ى͖͍ͯͨΤϥʔ ϑΥʔϜදࣔ࣌ʹউखʹϩάΠϯঢ়ଶ͕ղআ͞ΕΔ © 2023 Wantedly, Inc. • ग़୫ͳ CookieStore ηογϣϯͰ্ॻ͖͞Εͯ͠·͏
ݪҼͷௐࠪ © 2023 Wantedly, Inc.
എܠ: Wantedly ͷΞʔΩςΫνϟ ೝূ༻ͷϚΠΫϩαʔϏεͱɺΤϯτϦʔϑΥʔϜ༻ͷ ϚΠΫϩαʔϏε͕ผΕ͍ͯΔ • ֤ϚΠΫϩαʔϏεͰผݸʹ CookieStore ηογϣϯΛݕূ͍ͯ͠Δ ©
2023 Wantedly, Inc. ೝূ༻ϚΠΫϩαʔϏε ϑΥʔϜ༻ϚΠΫϩαʔϏε ೝূཁٻ ηογϣϯใ ϑΥʔϜೖྗཁٻ + ηογϣϯใ ϑΥʔϜใ ηογϣϯݕূ CookieStore ҉߸༻ڞ༗伴Λڞ༗
ೝূʹࣦഊͨ͠ݪҼͷௐࠪ CookieStore ηογϣϯͷ෮߸ʹࣦഊ • ೝূ༻ϚΠΫϩαʔϏεͷੜͨ͠ηογϣϯ͕ɺϑΥʔϜ༻ϚΠΫϩαʔϏεʹෆ ਖ਼ͳͷͱͯ͠ѻΘΕͨ © 2023 Wantedly, Inc.
ೝূ༻ϚΠΫϩαʔϏε ϑΥʔϜ༻ϚΠΫϩαʔϏε ೝূཁٻ ηογϣϯใ ϑΥʔϜೖྗཁٻ + ηογϣϯใ ೝূΤϥʔ ηογϣϯݕূʹ ࣦഊ
CookieStore ηογϣϯ෮߸ʹࣦഊͨ͠ݪҼͷௐࠪ ηογϣϯ෮߸ͷͨΊͷڞ༗伴͕৯͍ҧ͍ͬͯͨ © 2023 Wantedly, Inc.
എܠ: ڞ༗伴ੜͷΞϧΰϦζϜ secret_key_base + ιϧτʹϋογϡؔΛ܁Γฦ͠ద༻ • PBKDF2-HMAC • ૯ͨΓ߈ܸରࡦͷͨΊʹܭࢉΛॏ͍ͯ͘͠Δʢ͍ΘΏΔετϨονϯάʣ ©
2023 Wantedly, Inc. ϋογϡؔʢSHA256ʣ secret_key_base + ιϧτ ڞ༗伴 KeyGenerator
Τϥʔͷى͖ͨݪҼ Rails 7.0 ͔ΒσϑΥϧτͰڞ༗伴ੜʹ༻͍Δ ϋογϡ͕ؔมߋ͞Εͨ © 2023 Wantedly, Inc. SHA-1
SHA-256 secret_key_base + ιϧτ ڞ༗伴 ҟͳΔڞ༗伴 KeyGenerator
ͷमਖ਼ © 2023 Wantedly, Inc.
Ұ࣌ରԠ ڞ༗伴ੜʹ༻͍ΔϋογϡؔͷઃఆΛͨ͠ © 2023 Wantedly, Inc. • SHA-1 ࣌ΕͳͷͰɺ͓͍͓͍ SHA-256
ʹΞοϓσʔτ͍ͨ͠ • ԁͳҠߦʹϩʔςʔλ͕ඞཁ
·ͱΊ © 2023 Wantedly, Inc.
·ͱΊ • ֤ϚΠΫϩαʔϏεͰผݸʹ CookieStore ΛͬͨηογϣϯཧΛߦ͏ϚΠΫϩ αʔϏεΞʔΩςΫνϟ © 2023 Wantedly, Inc.
Rails 7.0 ΞοϓσʔτͰηογϣϯཧ͕ӨڹΛड͚Δ https://www.wantedly.com/companies/wantedly/post_articles/466117 ΞʔΩςΫνϟ࣍ୈͰਂࠁͳӨڹ͕ग़Δ߹͕͋Δ