{"push_id":2991403541,"size":2,"distinct_size":2,"ref":"refs/heads/casper-httponly-changes","head":"eba01c4e0e39fa870efca9fbc7b28cc13afe3995","before":"b14e79f43c9e66c17b3dbd6aa95c3f816c0ac6bd","commits":[{"sha":"6f74761f864263cdaa26c05e5c1ec8ca3a53ee64","author":{"name":"Matt Jankowski","email":"f912043f0beace52736c08c899f19d7bc3afb140@thoughtbot.com"},"message":"Add failing specs for multiple remember token cookies being set","distinct":true,"url":"https://api.github.com/repos/thoughtbot/clearance/commits/6f74761f864263cdaa26c05e5c1ec8ca3a53ee64"},{"sha":"eba01c4e0e39fa870efca9fbc7b28cc13afe3995","author":{"name":"Matt Jankowski","email":"f912043f0beace52736c08c899f19d7bc3afb140@thoughtbot.com"},"message":"Set remember_token cookie only one time\n\nPreviously there were scenarios where the cookie would be set both at the rails\ncontroller level via `sign_in` and then again at the Rack stack level. This\ncould create scenarios where attempting to sign out left a cookie in place and\ndid not fully sign out.\n\nThis change makes it so that the cookie headers are always added by rack, but\nwhere the controllers can still call sign_in to get current_user working\ncorrectly and to leave the session in a state where rack will notice the user\nhas been signed in and set the cookie.","distinct":true,"url":"https://api.github.com/repos/thoughtbot/clearance/commits/eba01c4e0e39fa870efca9fbc7b28cc13afe3995"}]}
{"actor":{"display_login":"mjankowski"}}