Skip to content

fix(security): migrate cookie serializer from :hybrid to :json#2487

Open
mroderick wants to merge 2 commits intocodebar:masterfrom
mroderick:fix/cookie-serializer-json
Open

fix(security): migrate cookie serializer from :hybrid to :json#2487
mroderick wants to merge 2 commits intocodebar:masterfrom
mroderick:fix/cookie-serializer-json

Conversation

@mroderick
Copy link
Collaborator

@mroderick mroderick commented Feb 15, 2026

⚠️ This PR should be deployed at least 24h after #2486

Part 2 of 2-step migration:

  • :hybrid allowed reading existing :marshal cookies
  • New cookies are written as :json
  • After sessions expire, will switch to :json

See https://nts.strzibny.name/migrating-rails-cookies-to-json/

Part 1 of 2-step migration:
- :hybrid allows reading existing :marshal cookies
- New cookies are written as :json
- After sessions expire, will switch to :json
Final step - now using :json for all cookies (read and write)
@mroderick mroderick changed the title Fix/cookie serializer json fix(security): migrate cookie serializer from :hybrid to :json Feb 15, 2026
@olleolleolle
Copy link
Collaborator

Nice, the previous compatibility PR is merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants