Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings
Discussion options

I have a question.
Why should we log out all users after changing the value of framework.secret ?
The documentation says:

However, keep in mind that changing this value will invalidate all signed URIs and Remember Me cookies. That's why, after changing this value, you should regenerate the application cache and log out all the application users.
https://symfony.com/doc/8.0/reference/configuration/framework.html#secret

I understand that signed URLs and "remember me" cookies will be invalidated, but I don’t quite see why this implies that all users must be logged out.
In my case, I need to change the secret value for a production application, and I must explain the reason for this requirement to my manager.
Could someone please clarify this for me? Any help would be greatly appreciated! 🙏

You must be logged in to vote

Replies: 0 comments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
🙏
Q&A
Labels
None yet
1 participant
Morty Proxy This is a proxified and sanitized view of the page, visit original site.