Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Gotanda.rb#56
Search
Masayuki Mizuno
December 20, 2023
0
75
Gotanda.rb#56
Masayuki Mizuno
December 20, 2023
Tweet
Share
More Decks by Masayuki Mizuno
See All by Masayuki Mizuno
次世代のプロファイラVernierを試す
fetburner
0
73
数値計算とメモリ最適化
fetburner
0
64
3/14なので円周率を計算する
fetburner
0
300
ネットワーク機器の中の OCaml
fetburner
1
640
遅延評価を使ってOSSのバグを修正した話
fetburner
1
180
Featured
See All Featured
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
smashingmag
248
20k
Principles of Awesome APIs and How to Build Them.
keavy
124
16k
Faster Mobile Websites
deanohume
303
30k
Speed Design
sergeychernyshev
9
270
Writing Fast Ruby
sferik
623
60k
Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything
marktimemedia
23
1.9k
Music & Morning Musume
bryan
43
5.9k
Fireside Chat
paigeccino
25
2.8k
Put a Button on it: Removing Barriers to Going Fast.
kastner
58
3.3k
Java REST API Framework Comparison - PWX 2021
mraible
PRO
20
7.2k
Adopting Sorbet at Scale
ufuk
71
8.8k
Git: the NoSQL Database
bkeepers
PRO
423
64k
Transcript
© 2023 Wantedly, Inc. Rails 7.0 ΞοϓάϨʔυͰ ηογϣϯཧ͕յΕͨ Dec. 20
2023 - ਫ խ೭
ࠓ͢͜ͱ © 2023 Wantedly, Inc.
ࠓ͢ࣄ • ֤ϚΠΫϩαʔϏεͰผݸʹ CookieStore ΛͬͨηογϣϯཧΛߦ͏ϚΠΫϩ αʔϏεΞʔΩςΫνϟ © 2023 Wantedly, Inc.
Rails 7.0 ΞοϓσʔτͰηογϣϯཧ͕յΕͨ https://www.wantedly.com/companies/wantedly/post_articles/466117 ΞʔΩςΫνϟ࣍ୈͰਂࠁͳӨڹ͕ग़Δ߹͕͋Δ
Կ͕ى͖ͨͷ͔ © 2023 Wantedly, Inc.
Կ͕ى͖ͨͷ͔ ϑΥʔϜࣗಈೖྗϘλϯ͕ಈ࡞͠ͳ͘ͳͬͨ © 2023 Wantedly, Inc. • 2022ͷ2݄͝Ζ
ى͖͍ͯͨΤϥʔ ϑΥʔϜදࣔ࣌ʹউखʹϩάΠϯঢ়ଶ͕ղআ͞ΕΔ © 2023 Wantedly, Inc. • ग़୫ͳ CookieStore ηογϣϯͰ্ॻ͖͞Εͯ͠·͏
ݪҼͷௐࠪ © 2023 Wantedly, Inc.
എܠ: Wantedly ͷΞʔΩςΫνϟ ೝূ༻ͷϚΠΫϩαʔϏεͱɺΤϯτϦʔϑΥʔϜ༻ͷ ϚΠΫϩαʔϏε͕ผΕ͍ͯΔ • ֤ϚΠΫϩαʔϏεͰผݸʹ CookieStore ηογϣϯΛݕূ͍ͯ͠Δ ©
2023 Wantedly, Inc. ೝূ༻ϚΠΫϩαʔϏε ϑΥʔϜ༻ϚΠΫϩαʔϏε ೝূཁٻ ηογϣϯใ ϑΥʔϜೖྗཁٻ + ηογϣϯใ ϑΥʔϜใ ηογϣϯݕূ CookieStore ҉߸༻ڞ༗伴Λڞ༗
ೝূʹࣦഊͨ͠ݪҼͷௐࠪ CookieStore ηογϣϯͷ෮߸ʹࣦഊ • ೝূ༻ϚΠΫϩαʔϏεͷੜͨ͠ηογϣϯ͕ɺϑΥʔϜ༻ϚΠΫϩαʔϏεʹෆ ਖ਼ͳͷͱͯ͠ѻΘΕͨ © 2023 Wantedly, Inc.
ೝূ༻ϚΠΫϩαʔϏε ϑΥʔϜ༻ϚΠΫϩαʔϏε ೝূཁٻ ηογϣϯใ ϑΥʔϜೖྗཁٻ + ηογϣϯใ ೝূΤϥʔ ηογϣϯݕূʹ ࣦഊ
CookieStore ηογϣϯ෮߸ʹࣦഊͨ͠ݪҼͷௐࠪ ηογϣϯ෮߸ͷͨΊͷڞ༗伴͕৯͍ҧ͍ͬͯͨ © 2023 Wantedly, Inc.
എܠ: ڞ༗伴ੜͷΞϧΰϦζϜ secret_key_base + ιϧτʹϋογϡؔΛ܁Γฦ͠ద༻ • PBKDF2-HMAC • ૯ͨΓ߈ܸରࡦͷͨΊʹܭࢉΛॏ͍ͯ͘͠Δʢ͍ΘΏΔετϨονϯάʣ ©
2023 Wantedly, Inc. ϋογϡؔʢSHA256ʣ secret_key_base + ιϧτ ڞ༗伴 KeyGenerator
Τϥʔͷى͖ͨݪҼ Rails 7.0 ͔ΒσϑΥϧτͰڞ༗伴ੜʹ༻͍Δ ϋογϡ͕ؔมߋ͞Εͨ © 2023 Wantedly, Inc. SHA-1
SHA-256 secret_key_base + ιϧτ ڞ༗伴 ҟͳΔڞ༗伴 KeyGenerator
ͷमਖ਼ © 2023 Wantedly, Inc.
Ұ࣌ରԠ ڞ༗伴ੜʹ༻͍ΔϋογϡؔͷઃఆΛͨ͠ © 2023 Wantedly, Inc. • SHA-1 ࣌ΕͳͷͰɺ͓͍͓͍ SHA-256
ʹΞοϓσʔτ͍ͨ͠ • ԁͳҠߦʹϩʔςʔλ͕ඞཁ
·ͱΊ © 2023 Wantedly, Inc.
·ͱΊ • ֤ϚΠΫϩαʔϏεͰผݸʹ CookieStore ΛͬͨηογϣϯཧΛߦ͏ϚΠΫϩ αʔϏεΞʔΩςΫνϟ © 2023 Wantedly, Inc.
Rails 7.0 ΞοϓσʔτͰηογϣϯཧ͕ӨڹΛड͚Δ https://www.wantedly.com/companies/wantedly/post_articles/466117 ΞʔΩςΫνϟ࣍ୈͰਂࠁͳӨڹ͕ग़Δ߹͕͋Δ