aboutsummaryrefslogtreecommitdiffstats
path: root/guides/source
diff options
context:
space:
mode:
authorXavier Noria <fxn@hashref.com>2013-12-19 19:57:23 +0100
committerXavier Noria <fxn@hashref.com>2013-12-19 19:58:40 +0100
commit293a1a68992ba3e3e80f9f0f685e866ff79bf11a (patch)
tree1d494143636319ae0e63a65cc0399cd4cb32506d /guides/source
parent33566770ee9179f23a36651e584f78e44c731798 (diff)
downloadrails-293a1a68992ba3e3e80f9f0f685e866ff79bf11a.tar.gz
rails-293a1a68992ba3e3e80f9f0f685e866ff79bf11a.tar.bz2
rails-293a1a68992ba3e3e80f9f0f685e866ff79bf11a.zip
revises the release notes about message verifiers [ci skip]
Example code does not run yet with beta1.
Diffstat (limited to 'guides/source')
-rw-r--r--guides/source/4_1_release_notes.md19
1 files changed, 11 insertions, 8 deletions
diff --git a/guides/source/4_1_release_notes.md b/guides/source/4_1_release_notes.md
index 40ab1a1d33..1ff9ae4aa8 100644
--- a/guides/source/4_1_release_notes.md
+++ b/guides/source/4_1_release_notes.md
@@ -181,18 +181,21 @@ See its
[documentation](http://api.rubyonrails.org/v4.1.0/classes/ActiveRecord/Enum.html)
for a detailed write up.
-### Application Message Verifier
+### Message Verifiers
-The application message verifier can be used to generate and verify signed
-messages in the application. This can be useful for remember-me tokens and
-friends:
+Message verifiers can be used to generate and verify signed messages. This can
+be useful to safely transport sensitive data like remember-me tokens and
+friends.
+
+The method `Rails.application.message_verifier` returns a new message verifier
+that signs messages with a key derived from secret_key_base and the given
+message verifier name:
```ruby
-signed_message = Rails.application.message_verifier('salt').generate('my sensible data')
-Rails.application.message_verifier('salt').verify(signed_message)
-# => 'my sensible data'
+signed_token = Rails.application.message_verifier(:remember_me).generate(token)
+Rails.application.message_verifier(:remember_me).verify(signed_token) # => token
-Rails.application.message_verifier('salt').verify(tampered_message)
+Rails.application.message_verifier(:remember_me).verify(tampered_token)
# raises ActiveSupport::MessageVerifier::InvalidSignature
```