module ActionDispatch::Cookies::ChainedCookieJars

def encrypted

cookies.encrypted[:discount] # => 45

# => Set-Cookie: discount=DIQ7fw==--K3n//8vvnSbGq9dA--7Xh91HfLpwzbj1czhBiwOg==; path=/
cookies.encrypted[:discount] = 45

Example:

This jar requires that you set a suitable secret for the verification on your app's +secret_key_base+.

are both set, legacy cookies encrypted with HMAC AES-256-CBC will be transparently upgraded.
If +config.action_dispatch.encrypted_cookie_salt+ and +config.action_dispatch.encrypted_signed_cookie_salt+

If the cookie was tampered with by the user (or a 3rd party), +nil+ will be returned.
Returns a jar that'll automatically encrypt cookie values before sending them to the client and will decrypt them for read.
def encrypted
  @encrypted ||= EncryptedKeyRotatingCookieJar.new(self)
end

def encrypted_cookie_cipher

def encrypted_cookie_cipher
  request.encrypted_cookie_cipher || "aes-256-gcm"
end

def permanent

# => Set-Cookie: remember_me=BAhU--848956038e692d7046deab32b7131856ab20e14e; path=/; expires=Sun, 16-Dec-2029 03:24:16 GMT
cookies.permanent.signed[:remember_me] = current_user.id

This jar allows chaining with the signed jar as well, so you can set permanent, signed cookies. Examples:

This jar is only meant for writing. You'll read permanent cookies through the regular accessor.

# => Set-Cookie: prefers_open_id=true; path=/; expires=Sun, 16-Dec-2029 03:24:16 GMT
cookies.permanent[:prefers_open_id] = true

Returns a jar that'll automatically set the assigned cookies to have an expiration date 20 years from now. Example:
def permanent
  @permanent ||= PermanentCookieJar.new(self)
end

def prepare_upgrade_legacy_hmac_aes_cbc_cookies?

def prepare_upgrade_legacy_hmac_aes_cbc_cookies?
  request.secret_key_base.present? &&
    request.authenticated_encrypted_cookie_salt.present? &&
    !request.use_authenticated_cookie_encryption
end

def signed

cookies.signed[:discount] # => 45

# => Set-Cookie: discount=BAhpMg==--2c1c6906c90a3bc4fd54a51ffb41dffa4bf6b5f7; path=/
cookies.signed[:discount] = 45

Example:

This jar requires that you set a suitable secret for the verification on your app's +secret_key_base+.

cookie was tampered with by the user (or a 3rd party), +nil+ will be returned.
the cookie again. This is useful for creating cookies with values that the user is not supposed to change. If a signed
Returns a jar that'll automatically generate a signed representation of cookie value and verify it when reading from
def signed
  @signed ||= SignedKeyRotatingCookieJar.new(self)
end

def signed_cookie_digest

def signed_cookie_digest
  request.signed_cookie_digest || "SHA1"
end

def signed_or_encrypted

Used by ActionDispatch::Session::CookieStore to avoid the need to introduce new cookie stores.
Returns the +signed+ or +encrypted+ jar, preferring +encrypted+ if +secret_key_base+ is set.
def signed_or_encrypted
  @signed_or_encrypted ||=
    if request.secret_key_base.present?
      encrypted
    else
      signed
    end
end

def upgrade_legacy_hmac_aes_cbc_cookies?

def upgrade_legacy_hmac_aes_cbc_cookies?
  request.secret_key_base.present? &&
    request.encrypted_signed_cookie_salt.present? &&
    request.encrypted_cookie_salt.present? &&
    request.use_authenticated_cookie_encryption
end