Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Cross-Domain Sessions with Ruby on Rails

Avatar for Lukas Fittl Lukas Fittl
January 09, 2014
Programming
1
450

Cross-Domain Sessions with Ruby on Rails

So, how does one write a Rails 4 session store?

Avatar for Lukas Fittl

Lukas Fittl

January 09, 2014
Tweet

More Decks by Lukas Fittl

See All by Lukas Fittl
How to Scale Postgres - Automation, Tuning & Sharding
Avatar for Lukas Fittl lfittl
0
670
What's Missing for Postgres Monitoring
Avatar for Lukas Fittl lfittl
0
260
A Map For Monitoring PostgreSQL
Avatar for Lukas Fittl lfittl
2
390
Monitoring Postgres at Scale
Avatar for Lukas Fittl lfittl
1
460
Monitoring PostgreSQL at Scale
Avatar for Lukas Fittl lfittl
4
270
Postgres Performance for App Developers
Avatar for Lukas Fittl lfittl
2
310
GraphQL ❤ PostgreSQL -- P.S. aka BeatQL
Avatar for Lukas Fittl lfittl
1
610
Hacking PostgreSQL to Gain SQL Parsing Superpowers
Avatar for Lukas Fittl lfittl
1
600
PostgreSQL at a Web Startup
Avatar for Lukas Fittl lfittl
3
600

Other Decks in Programming

See All in Programming
Denoのセキュリティに関する仕組みの紹介 (toranoana.deno #23)
Avatar for uki00a uki00a
0
260
CSC307 Lecture 02
Avatar for Javier Gonzalez-Sanchez javiergs
PRO
1
770
Basic Architectures
Avatar for Denys Poltorak denyspoltorak
0
630
20260127_試行錯誤の結晶を1冊に。著者が解説 先輩データサイエンティストからの指南書 / author's_commentary_ds_instructions_guide
Avatar for nash_efp nash_efp
0
690
2026年 エンジニアリング自己学習法
Avatar for yumechi(Motoki Hirao) yumechi
0
110
AI Agent Dojo ＃4: watsonx Orchestrate ADK体験
Avatar for Akira Onishi (IBM) oniak3ibm
PRO
0
130
ELYZA_Findy AI Engineering Summit登壇資料_AIコーディング時代に「ちゃんと」やること_toB LLMプロダクト開発舞台裏_20251216
Avatar for 株式会社ELYZA elyza
2
1.3k
GISエンジニアから見たLINKSデータ
Avatar for nokonoko1203 nokonoko1203
0
190
それ、本当に安全？ ファイルアップロードで見落としがちなセキュリティリスクと対策
Avatar for ikechi penpeen
7
2.4k
2年のAppleウォレットパス開発の振り返り
Avatar for muno92 muno92
PRO
0
190
The Art of Re-Architecture - Droidcon India 2025
Avatar for Sid Patil siddroid
0
170
HTTPプロトコル正しく理解していますか？ 〜かわいい猫と共に学ぼう。ฅ^•ω•^ฅ ﾆｬ〜
Avatar for ♛Heitor Hirose hekuchan
2
660

Featured

See All Featured
From Legacy to Launchpad: Building Startup-Ready Communities
Avatar for Dug Song dugsong
0
130
Everyday Curiosity
Avatar for Cassini Nazir cassininazir
0
120
Sharpening the Axe: The Primacy of Toolmaking
Avatar for Bryan Cantrill bcantrill
46
2.7k
JavaScript: Past, Present, and Future - NDC Porto 2020
Avatar for David Neal reverentgeek
52
5.8k
New Earth Scene 8
Avatar for Sydney Stone popppiees
1
1.4k
Producing Creativity
Avatar for Steve Smith orderedlist
PRO
348
40k
Being A Developer After 40
Avatar for Adrian Kosmaczewski akosma
91
590k
The Illustrated Guide to Node.js - THAT Conference 2024
Avatar for David Neal reverentgeek
0
250
How to Grow Your eCommerce with AI & Automation
Avatar for Katarina Dahlin katarinadahlin
PRO
0
97
Learning to Love Humans: Emotional Interface Design
Avatar for Aarron Walter aarron
275
41k
Building a Scalable Design System with Sketch
Avatar for Laura Van Doore lauravandoore
463
34k
Ecommerce SEO: The Keys for Success Now & Beyond - #SERPConf2024
Avatar for Aleyda Solis aleyda
1
1.8k

Transcript

  1. @LukasFittl Cross-Domain Sessions So, how does one write a Rails

    4 session store?

  2. Biz + UX + Dev @LukasFittl

  3. So, 7 years ago we started this company: commit 2086c55b13426c2834f7060ad3739eed68e891c2

    Author: Esad Hajdarevic <[email protected]> Date: Sun Mar 25 22:47:30 2007 +0000 ! Initial tags+trunk creation git-svn-id: svn://svn.phoria.eu/soup/trunk@1 c0834aa2-9929-0410-9117-c50b2a7daf23

  4. Its still around :) ! But it runs Rails 2.3.

  5. 100+ hours later we’re (almost) on Rails 4.

  6. Soooo... Sessions.

  7. www.soup.io = Login/Logout/etc

  8. mysoup.io = Soup Admin, Create Posts, etc

  9. How can we make that work?

  10. First thought: <iframe>

  11. Actually, thats pretty painful.

  12. What we ended up doing: www.soup.io mysoup.io Memcached / Redis

    SESSION_ID REMOTE_SESSION_ID

  13. Getting a REMOTE_SESSION_ID: http://mysoup.io/
 => http://soup.io/remote/generate?host=mysoup.io
 (requested with main session

    cookie YYY) ! => http://mysoup.io/?sessid=ZZZ SetCookie: soup_session_id=ZZZ ! => http://mysoup.io/ ! remote_session_link_ZZZ => mysoup.io--YYY Memcached / Redis

  14. Lets look at the code :)

  15. @LukasFittl Thank you! pganalyze.com