A Deep Dive Into Sessions
summary
Explains that Rails either stores full session data in a signed and encrypted cookie (JSON by default) or stores a short session ID in the cookie and keeps data in DB/cache/Redis; cookie mode hits an 4KB cookie limit and raises ActionDispatch::Cookies::CookieOverflow, cookie mode needs secret_key for signing, and config.force_ssl = true sets the secure flag; recommends mitmproxy for network debugging and tools like cURL/Postman/Paw; prefers CookieStore then CacheStore then DB and provides a gem to decode encrypted sessions.
AI-written summary · about
