hogelog

Lifetime mismatch between session key and session value when `expire_after: nil` is set.

3

I was developing a Rails app that switches the session store to redis and accidentally set `expire_after: nil`. I found a strange behavior with that setting and I'd like to...

Rack::Session::Redis#generate_unique_sid's unique session key generation logic does not work

4

`Rack::Session::Redis#generate_unique_sid` is a method that generates new unique session key that it does not conflict with an existing session key. But it seems does not work well after https://github.com/redis-store/redis-rack/pull/37 PR....

The current redis-session-store has been implemented to throw the exists command to redis twice. https://github.com/roidrage/redis-session-store/blob/21c576d5460f38ee781037114ec22f354c453828/lib/redis-session-store.rb#L68 https://github.com/roidrage/redis-session-store/blob/21c576d5460f38ee781037114ec22f354c453828/lib/redis-session-store.rb#L124 With this PR implementation, a session that has not been migrated to private_id will...

Now, redis-session-store uses `AbstractSecureStore`. And rails gem with `AbstractSecureStore` introduced (>= 5.2.4.1 and >= 6.0.2.1) depends rack >= 2.0.8. https://rubygems.org/gems/actionpack/versions/5.2.4.1 https://rubygems.org/gems/actionpack/versions/6.0.2.1 As a result, I would like to clean up...