Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Cross-Domain Sessions with Ruby on Rails

Avatar for Lukas Fittl Lukas Fittl
January 09, 2014
Programming
480
1

Cross-Domain Sessions with Ruby on Rails

So, how does one write a Rails 4 session store?

Avatar for Lukas Fittl

Lukas Fittl

January 09, 2014

More Decks by Lukas Fittl

See All by Lukas Fittl
How to Scale Postgres - Automation, Tuning & Sharding
Avatar for Lukas Fittl lfittl
0
700
What's Missing for Postgres Monitoring
Avatar for Lukas Fittl lfittl
0
300
A Map For Monitoring PostgreSQL
Avatar for Lukas Fittl lfittl
2
420
Monitoring Postgres at Scale
Avatar for Lukas Fittl lfittl
1
500
Monitoring PostgreSQL at Scale
Avatar for Lukas Fittl lfittl
4
290
Postgres Performance for App Developers
Avatar for Lukas Fittl lfittl
2
340
GraphQL ❤ PostgreSQL -- P.S. aka BeatQL
Avatar for Lukas Fittl lfittl
1
660
Hacking PostgreSQL to Gain SQL Parsing Superpowers
Avatar for Lukas Fittl lfittl
1
640
PostgreSQL at a Web Startup
Avatar for Lukas Fittl lfittl
3
640

Other Decks in Programming

See All in Programming
言葉の格闘技のススメ～紙とペンと言葉から始める、キャリアの描き方～
Avatar for 進捗ゼミ progresscicada
2
170
いまどきの Codex で開発する visionOS アプリの開発スタイルについて
Avatar for kazuhiro hara karad
0
160
Pythonの実行はどこまで賢くなったのか？ CPythonとPyPyから見る最適化のしくみ
Avatar for curekoshimizu curekoshimizu
3
1.6k
Loosening the Reins: Go Generics Get More Flexible
Avatar for kuro kuro_kurorrr
0
280
進化を続けるGo toolsの現在地 / The Current State of Ever-Evolving Go Tools
Avatar for hond hond0413
0
250
How I Won Prize Money at a Hackathon Using Codex and Symphony Alpha
Avatar for yasei no otoko yasei_no_otoko
0
120
Japan Community Day at Kubecon + CloudNativeCon Japan 2026: Learning Container Privilege Control by Building My Own Low-Level Container Runtime
Avatar for ternbusty ternbusty
1
170
ここ半年くらいでAIに作らせたR用ツール
Avatar for eitsupi eitsupi
0
400
Jindong: Introducing Declarative Haptics in Compose Multiplatform
Avatar for HyunWoo Lee l2hyunwoo
0
130
GDG Korea Android: 2026 I/O Extended ~ What's new in Android development tools
Avatar for pluulove (노현석) pluu
0
240
Detecting Compromised CI with eBPF and Cilium Tetragon
Avatar for Liz Rice lizrice
0
250
170k Jobs a Day on GKE: Scaling Mercari's CI Platform - and What's Next for AI-Native Development
Avatar for Junya Okabe junyaokabe
0
120

Featured

See All Featured
The Cost Of JavaScript in 2023
Avatar for Addy Osmani addyosmani
55
10k
AI Search:
Where Are We & What Can We Do About It?
Avatar for Aleyda Solis aleyda
0
7.8k
Automating Front-end Workflow
Avatar for Addy Osmani addyosmani
1369
210k
Deep Space Network (abreviated)
Avatar for Tony Rice tonyrice
0
270
Performance Is Good for Brains [We Love Speed 2024]
Avatar for Tammy Everts tammyeverts
12
1.8k
Large-scale JavaScript Application Architecture
Avatar for Addy Osmani addyosmani
515
110k
Agile Actions for Facilitating Distributed Teams - ADO2019
Avatar for Mark Kilby mkilby
0
260
Agile Leadership in an Agile Organization
Avatar for Dr. Kim W Petersen kimpetersen
PRO
0
210
How to train your dragon (web standard)
Avatar for Monica Dinculescu notwaldorf
97
6.8k
Ecommerce SEO: The Keys for Success Now & Beyond - #SERPConf2024
Avatar for Aleyda Solis aleyda
1
2.1k
Why Mistakes Are the Best Teachers: Turning Failure into a Pathway for Growth
Avatar for Umar Saidu Auna auna
0
210
16th Malabo Montpellier Forum Presentation
Avatar for AKADEMIYA2063 akademiya2063
PRO
0
360

Transcript

  1. @LukasFittl Cross-Domain Sessions So, how does one write a Rails

    4 session store?

  2. Biz + UX + Dev @LukasFittl

  3. So, 7 years ago we started this company: commit 2086c55b13426c2834f7060ad3739eed68e891c2

    Author: Esad Hajdarevic <[email protected]> Date: Sun Mar 25 22:47:30 2007 +0000 ! Initial tags+trunk creation git-svn-id: svn://svn.phoria.eu/soup/trunk@1 c0834aa2-9929-0410-9117-c50b2a7daf23

  4. Its still around :) ! But it runs Rails 2.3.

  5. 100+ hours later we’re (almost) on Rails 4.

  6. Soooo... Sessions.

  7. www.soup.io = Login/Logout/etc

  8. mysoup.io = Soup Admin, Create Posts, etc

  9. How can we make that work?

  10. First thought: <iframe>

  11. Actually, thats pretty painful.

  12. What we ended up doing: www.soup.io mysoup.io Memcached / Redis

    SESSION_ID REMOTE_SESSION_ID

  13. Getting a REMOTE_SESSION_ID: http://mysoup.io/
 => http://soup.io/remote/generate?host=mysoup.io
 (requested with main session

    cookie YYY) ! => http://mysoup.io/?sessid=ZZZ SetCookie: soup_session_id=ZZZ ! => http://mysoup.io/ ! remote_session_link_ZZZ => mysoup.io--YYY Memcached / Redis

  14. Lets look at the code :)

  15. @LukasFittl Thank you! pganalyze.com