diff --git a/config/initializers/100-session_store.rb b/config/initializers/100-session_store.rb index d83a343e0c3..ab4077023f3 100644 --- a/config/initializers/100-session_store.rb +++ b/config/initializers/100-session_store.rb @@ -2,13 +2,18 @@ # require_dependency 'discourse_cookie_store' +if Rails.env == "development" && SiteSetting.force_https + STDERR.puts + STDERR.puts "WARNING: force_https is enabled in dev" + STDERR.puts "It is very unlikely you are running HTTPS in dev." + STDERR.puts "Without HTTPS your session cookie will not work" + STDERR.puts "Try: bin/rails c" + STDERR.puts "SiteSetting.force_https = false" + STDERR.puts +end + Discourse::Application.config.session_store( :discourse_cookie_store, key: '_forum_session', path: (Rails.application.config.relative_url_root.nil?) ? '/' : Rails.application.config.relative_url_root ) - -# Use the database for sessions instead of the cookie-based default, -# which shouldn't be used to store highly confidential information -# (create the session table with "rails generate session_migration") -# Discourse::Application.config.session_store :active_record_store