[B! session] takaesuã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

takaesu id:takaesu

sessionã«é–¢ã™ã‚‹takaesuã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Amazon DynamoDBã«ã‚ˆã‚‹Tomcatã‚»ãƒƒã‚·ãƒ§ãƒ³æ°¸ç¶šåŒ–ã¨ãƒ•ã‚§ã‚¤ãƒ«ã‚ªãƒ¼ãƒãƒ¼ | DevelopersIO
Tomcatã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ç®¡ç† Tomcatã§ã‚¯ãƒ©ã‚¹ã‚¿ãƒ¼æ§‹æˆã«ã™ã‚‹å ´åˆã€èª²é¡Œã¨ãªã‚‹ã®ãŒã‚»ãƒƒã‚·ãƒ§ãƒ³ç®¡ç†ã§ã™ã€‚ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µãƒ¼ã§ã‚»ãƒƒã‚·ãƒ§ãƒ³IDã‚’ä¿æŒã™ã‚‹ã“ã¨ã§ã€æ¯Žå›žåŒã˜ã‚µãƒ¼ãƒãƒ¼ã«ãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒå‘ã‹ã†ã®ã§ã‚ã‚Œã°å•é¡Œãªã•ãã†ã«è¦‹ãˆã¾ã™ãŒã€ã‚ã‚‹ã‚µãƒ¼ãƒãƒ¼ãŒãƒ€ã‚¦ãƒ³ã—ã¦ã—ã¾ã†ã¨ã‚»ãƒƒã‚·ãƒ§ãƒ³æƒ…å ±ãŒæ¶ˆãˆã¦ã—ã¾ã„ã¾ã™ã€‚ã“ã‚Œã‚’è§£æ±ºã™ã‚‹æ–¹æ³•ã¨ã—ã¦ã€ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã«ã‚»ãƒƒã‚·ãƒ§ãƒ³æƒ…å ±ã‚’ä¿æŒã™ã‚‹æ–¹æ³•ãŒä¸€èˆ¬çš„ã§ã™ãŒã€ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã¸è² è·ãŒæŽ›ã‹ã‚Šã¾ã™ã—ã€ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãŒè½ã¡ãŸã‚‰å›°ã‚Šã¾ã™ã€‚ä½•ã‹ã‚‚ã£ã¨è‰¯ã„æ–¹æ³•ã¯ç„¡ã„ã‹ã¨çš†ã•ã‚“æ€ã£ã¦ã„ãŸã¯ãšã§ã™ã€‚ãã“ã§ã€AWSã§ã™ã‚ˆããƒ¼ã€‚AWSã§ã¯ã€ElastiCacheã‚„DynamoDBãŒã‚µãƒ¼ãƒ“ã‚¹ã¨ã—ã¦æä¾›ã•ã‚Œã¦ã„ã¾ã™ã€‚ã“ã“ã§ã€æ°¸ç¶šåŒ–ã‚’ã—ã£ã‹ã‚Šã‚„ã£ã¦ãã‚Œã‚‹ã®ã¯DynamoDBã§ã‚ã‚Šã€AWS SDK for Javaã§ã®ç™»å ´ãŒå¾…ãŸã‚Œã¦ã„ãŸã‚ã‘ã§ã™ã€‚ãã—ã¦ã€ã“ã®ãŸã³å‡ºã¦ãã¾ã—ãŸï¼ ã‚¹ãƒ†ã‚£ãƒƒã‚ãƒ¼ã‚»ãƒƒã‚·ãƒ§ãƒ³ ãƒãƒ¼ãƒ‰ãƒ
takaesu 2016/03/16
Tomcatã®ä»•æ§˜ã«ã‚ˆã‚Šã‚»ãƒƒã‚·ãƒ§ãƒ³ã®æ°¸ç¶šåŒ–ãŒéžåŒæœŸã§é…å»¶ã™ã‚‹ã€‚ã‚»ãƒƒã‚·ãƒ§ãƒ³æ›¸ãè¾¼ã¿ãŒé€£ç¶šã—ãŸéš›ã€å†—é•·åŒ–ã®ã‚µãƒ¼ãƒã«ã‚ˆã£ã¦å·®ç•°ãŒå‡ºã¦ã—ã¾ã†ã®ã§ã€ELBã‚’ã‚¹ãƒ†ã‚£ãƒƒã‚âˆ’ã‚»ãƒƒã‚·ãƒ§ãƒ³ã«ã—ãªã„ã¨ã ã‚

session

ã‚¹ãƒ†ã‚£ãƒƒã‚ãƒ¼ã‚»ãƒƒã‚·ãƒ§
ãƒªãƒ³ã‚¯
Railsã®CookieStoreã®è„†å¼±æ€§ã«ã¤ã„ã¦
Railsã®CookieStoreã®è„†å¼±æ€§ã«ã¤ã„ã¦ã„ãã¤ã‹å ±å‘Šè¨˜äº‹ãŒå‡ºã¦ã„ãŸã®ã§ã€å†…å®¹ã‚’æ¤œè¨Žã—ã¦ã¿ã¾ã—ãŸã€‚ Ruby on Railsã«cookieä¿å˜é–¢é€£ã®è„†å¼±æ€§ã€2000ã‚µã‚¤ãƒˆã§æ”¾ç½®çŠ¶æ…‹ http://www.itmedia.co.jp/enterprise/articles/1311/27/news041.html Rails Sessionã«CookieStoreä½¿ã£ãŸæ™‚ã®å•é¡Œç‚¹ http://oauth.jp/blog/2013/09/26/rails-session-cookie/ èªã¿åˆã‚ã›ã¦ã„ãã¨ã€ä»¥ä¸‹ã®ã‚ˆã†ãªå•é¡ŒãŒã‚ã‚‹ã‚ˆã†ã§ã™ã€‚ -Cookieã®æƒ…å ±ãŒæŠœã‹ã‚Œã‚‹ã“ã¨ã«ã‚ˆã£ã¦ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’ãƒã‚¤ã‚¸ãƒ£ãƒƒã‚¯ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ --Rails 2ç³»ã«ã¯XSSè„†å¼±æ€§ã‹ã‚‰Cookieã®æƒ…å ±ãŒæŠœã‹ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ --Rails 3/4ç³»ã§ã‚‚CookieãŒç›—è´ã•ã‚Œã‚‹å ´åˆã¯å±é™º -ã‚»ãƒƒã‚·ãƒ§ãƒ³
takaesu 2014/08/14
rails

cookie

session
ãƒªãƒ³ã‚¯
Rails sessionã®ã‚·ãƒªã‚¢ãƒ©ã‚¤ã‚ºã«JSONãŒä½¿ã‚ã‚Œãªã„ç†ç”±: ãªãœMarshal? JSON/YAMLã®ç½ - memo.yomukaku.net
Rails sessionã®ã‚·ãƒªã‚¢ãƒ©ã‚¤ã‚ºã«JSONãŒä½¿ã‚ã‚Œãªã„ç†ç”±: ãªãœMarshal? JSON/YAMLã®ç½ 2011-07-18 04:35 Railsã®sessionæƒ…å ±ã‚’JSONã‚„YAMLã§ã‚·ãƒªã‚¢ãƒ©ã‚¤ã‚ºã™ã‚‹ã¨ä¸éƒ½åˆã«å‡ºéã„ã¾ã™ã€‚ä¸éƒ½åˆã®ç†ç”±ã¨ãã®è§£æ¶ˆæ–¹æ³•ã€sessionã®ã‚·ãƒªã‚¢ãƒ©ã‚¤ã‚ºã«JSONã‚„YAMLã§ã¯ãªãMarshalãŒä½¿ç”¨ã•ã‚Œã‚‹ç†ç”±ã«ã¤ã„ã¦æ›¸ãã¾ã™ã€‚ Railsã¨ã€node.jsã®ã‚ˆã†ãªRubyä»¥å¤–ã§æ›¸ã‹ã‚ŒãŸç³»ã®åŒæ–¹ã§sessionã‚’å…±æœ‰ã™ã‚‹å ´åˆã«é‡è¦ã§ã™ã€‚ Railsã®sessionã¯Marshalã§ã‚·ãƒªã‚¢ãƒ©ã‚¤ã‚ºã™ã‚‹ã®ãŒä¸€èˆ¬çš„ ç¾åœ¨ã€Railsã®sessionæƒ…å ±ã‚’ã‚·ãƒªã‚¢ãƒ©ã‚¤ã‚ºã—ã¦ä»»æ„ã®ãƒ‡ãƒ¼ã‚¿ã‚¹ãƒˆã‚¢ã«æ°¸ç¶šåŒ–ã™ã‚‹å ´åˆã€encode64(Marshal.dump(session_data))ã®ã‚ˆã†ã«Marshalã—ã¦ã•ã‚‰ã«Base64ã‚’ä½¿ã£ã¦ãƒã‚¤ãƒŠãƒªã®æ–‡å—åˆ—ã«ã—ã¦ã‹ã‚‰æ°¸
takaesu 2014/02/25
ruby

rails

ã‚·ãƒªã‚¢ãƒ©ã‚¤ã‚º

serialize

session

Marshal
ãƒªãƒ³ã‚¯
ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ä½œæ¥ä¸ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã«æŽ¥ç¶šã—ã€å…±åŒä½œæ¥ã—ã¦ã‚‚ã‚‰ã†æ–¹æ³• - Qiita
ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰åŒã˜ã‚»ãƒƒã‚·ãƒ§ãƒ³ã«æŽ¥ç¶šã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šã€ãƒšã‚¢ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚„ã‚¤ãƒ³ãƒ•ãƒ©ä½œæ¥ãªã©ã®å…±åŒä½œæ¥ãŒæ—ã‚Šã¾ã™ã€‚å¸ã‚’ç§»å‹•ã—ãŸã‚Šã™ã‚‹æ‰‹é–“ã¨ã‹ã€ä½¿ã„æ…£ã‚Œãªã„ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã®æ“ä½œã¨ã‚‚ãŠã•ã‚‰ã°ã§ã™ã€‚ wem uxã‚’æ´»ç”¨ã—ã€å˜ä¸€ã‚³ãƒ³ã‚½ãƒ¼ãƒ«ã®è¤‡æ•°äººæ“ä½œã‚’å®Ÿç¾ã—ã¾ã™ã€‚ä¾‹ãˆã°ã€èª°ã‹ãŒæ–‡å—ã‚’æ‰“ã¡ã“ã‚ã°ã€ã‚‚ã†ä¸€æ–¹ã®ã‚³ãƒ³ã‚½ãƒ¼ãƒ«ã§ã‚‚åŒã˜ã‚ˆã†ã«è¡¨ç¤ºã•ã‚Œã¾ã™ã—ã€é€†å‘ãã‚‚åŒæ§˜ã¨ã„ã£ãŸæ„Ÿã˜ã§ã™ã€‚ãŠäº’ã„ã«å£°ã‚’ã‹ã‘ã‚ã£ã¦ä½œæ¥ã—ãªã„ã¨ã€ã—ã£ã¡ã‚ƒã‹ã‚ã£ã¡ã‚ƒã‹ã«ãªã‚Šã¾ã™ï¼ˆç¬‘ï¼‰ã€‚ æ“ä½œè‡ªä½“ã¯ã€æ™®æ®µã®ã‚³ãƒ³ã‚½ãƒ¼ãƒ«ä½œæ¥ã¨ä½•ã‚‰å¤‰ã‚ã‚Šã‚ã‚Šã¾ã›ã‚“ï¼ˆtmuxã®ã‚ãƒ¼ãƒã‚¤ãƒ³ãƒ‰ãŒæœ‰åŠ¹ã§ã™ï¼‰ã€‚ wem ux https://github.com/zolrath/wem ux ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰ã®ä½œæ¥ç”¨ã‚¢ã‚«ã‚¦ãƒ³ãƒˆä½œæˆ
takaesu 2013/11/25
wemax

tmux

session
ãƒªãƒ³ã‚¯
Rails Sessionã«CookieStoreä½¿ã£ãŸæ™‚ã®å•é¡Œç‚¹ - OAuth.jp
ä»Šæ—¥ @mad_p ã•ã‚“ã‹ã‚‰RTæ¥ã¦ãŸã“ã®ãƒ„ã‚¤ãƒ¼ãƒˆã«é–¢ã—ã¦ã€ã¡ã‚‡ã£ã¨èª¿ã¹ãŸã®ã§ã¾ã¨ã‚ã¨ãã¾ã™ã€‚ Security Issue in Ruby on Rails Could Expose Cookies http://t.co/JlsXVEn4rZ â€” Ruby on Rails News (@RubyonRailsNews) September 25, 2013 å‰ææ¡ä»¶ Railsã§ã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§sessionã‚’cookieã«ã®ã¿ä¿å˜ã—ã¦ã€DBãªã‚Šmemcacheãªã‚Šã®server-side storageã«ã¯ä½•ã‚‚ä¿å˜ã—ã¾ã›ã‚“ã€‚ ã“ã‚ŒãŒCookieStoreã¨ã‹å‘¼ã°ã‚Œã¦ã‚‹ã‚„ã¤ã§ã™ã€‚ ã“ã®å ´åˆã®session cookieã¯ã€Railsã®session object (Hash object) ã‚’Marshal.dumpã—ã¦ãã‚Œã«ç½²åã‚’ä»˜ã‘ãŸtokenã§ã™ã€‚ rails 4ã§ã¯ç½²åä»˜ã‘ã‚‹ä»£
takaesu 2013/11/07
session

rails

Ruby

Cookie
ãƒªãƒ³ã‚¯
Rails4ã§ãƒˆãƒ¼ã‚¯ãƒ³èªè¨¼ã®ã‚¢ã‚¯ã‚·ãƒ§ãƒ³ã«å¯¾ã—ã¦CSRFã‚’ç„¡åŠ¹ã«ã™ã‚‹ - hokaccha memo
Railsã¯protect_from_forgeryã£ã¦æ›¸ãã ã‘ã§CSRFå¯¾ç–ãŒæœ‰åŠ¹ã«ãªã£ã¦ãƒžã‚¸ä¾¿åˆ©ãªã‚ã‘ã ã‘ã©ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ã§èªè¨¼ã™ã‚‹ã‚“ã˜ã‚ƒãªãã¦iOSã‹ã‚‰å‘¼ã¶APIã¨ã‹ã§ãƒˆãƒ¼ã‚¯ãƒ³ä½¿ã£ã¦èªè¨¼ã™ã‚‹å ´åˆã¯CSRFã®å¯¾ç–ã„ã‚‰ãªã„ã®ã§ç„¡åŠ¹ã«ã—ãŸã„ã€‚ ãã®å ´åˆã¯ protect_from_forgery with: :null_session ã£ã¦ã™ã‚Œã°ã„ã„ã‚‰ã—ã„ã€‚ã“ã‚Œã¯CSRF TokenãŒä¸€è‡´ã—ãªã‹ã£ãŸå ´åˆã«ä¾‹å¤–ã‚’æŠ•ã’ã‚‹ã‚“ã˜ã‚ƒãªãã¦ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’ç©ºã«ã™ã‚‹ã¨ã„ã†å‹•ä½œã«ãªã‚‹ã€‚ ã¡ãªã¿ã«protect_from_forgeryã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã¯:null_sessionãªã®ã§ protect_from_forgery ã§ã‚‚ã‚ˆã•ãã†ï¼ˆRails 4.0.0ç¾åœ¨ï¼‰ ãŸã ã—æœ€åˆã¯ä»¥ä¸‹ã®ã‚ˆã†ã«ãªã£ã¦ã‚‹ã®ã§æ˜Žç¤ºçš„ã«å¤‰æ›´ã™ã‚‹å¿…è¦ã¯ã‚ã‚‹ã€‚ class ApplicationController < ActionContr
takaesu 2013/10/29
rails

session

api

csrf
ãƒªãƒ³ã‚¯
Railsã‚’ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã«ã€iOSã€Androidã‚¢ãƒ—ãƒªã‚’ã¤ãã‚‹ï¼ˆ1. ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰èªè¨¼ã‚·ã‚¹ãƒ†ãƒ ï¼‰ | Simple
iOSã¨Androidã®ã‚¢ãƒ—ãƒªã‚’ã¤ãã‚‹ã“ã¨ã«ãªã£ãŸã®ã§ãƒ¡ãƒ¢ãŒã¦ã‚‰é€£è¼‰ã‚’ã—ã¦ã„ããŸã„ã¨æ€ã„ã¾ã™ã€‚ ç°¡å˜ãªæ§‹é€ ã¨ã—ã¦ã¯ã€Railså´ã§ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ï¼ˆãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã¨ã‹ï¼‰ã€iOSã¨Androidã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã¨ã„ã†ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ ã¤ã¾ã‚Šã€jsonã‚’ä»‹ã—ã¦è‰²ã€…ã‚„ã£ã¦ã„ãã¾ã™ã€‚ ç¬¬ä¸€å›žã¯ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã®èªè¨¼ã‚·ã‚¹ãƒ†ãƒ ã‚’ä½œã‚Šã¾ã—ã‚‡ã†ã€‚ã¤ã¾ã‚Šã€ç™»éŒ²ã‹ã‚‰ãƒã‚°ã‚¤ãƒ³ã‚’ä½œã‚Šã¾ã™ã€‚ èªè¨¼ã‚·ã‚¹ãƒ†ãƒ ã¨ã—ã¦ã¯deviseã¨ã„ã†gemã‚’ä½¿ã„ã¾ã™ã€‚æœ‰åã§ã™ãã€‚å¾Œã»ã©æ™‚é–“ãŒã‚ã‚Œã°ã€0ã‹ã‚‰ã¤ãã£ãŸèªè¨¼ã‚·ã‚¹ãƒ†ãƒ ã§ã‚‚ã‚„ã£ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ã§ã¯ã€ã±ã±ãƒ¼ã¨ã„ãã¾ã—ã‚‡ã†ã€‚ ã¾ãšã¯ã€é©å½“ã«rails newã—ã¾ã—ã‚‡ã†ã€‚ ã§ã€æ¬¡ã«gemfileã« gem â€˜deviseâ€™ ã¨è¿½åŠ ã—ã¦ã€bundle installã‚’ã—ã¦ãã ã•ã„ã€‚ ç¶šã‘ã¦ rails generate devise:install rails generate de
takaesu 2013/10/29
rails

session

api

csrf
ãƒªãƒ³ã‚¯
1