class ActiveSupport::SecureCompareRotator

end
end
end
false
rescue ActiveSupport::SecureCompareRotator::InvalidMatch
rotator.secure_compare!(password)
authenticate_or_request_with_http_basic do |username, password|
rotator.rotate(‘old_password’)
rotator = ActiveSupport::SecureCompareRotator.new(‘new_password’)
def authenticate_request
class MyController < ApplicationController
One real use case example would be to rotate a basic auth credentials:
rotator.secure_compare!(‘previous_production_value’)
rotator.rotate(‘previous_production_value’)
rotator = ActiveSupport::SecureCompareRotator.new(‘new_production_value’)
It can be used as follow:
and allows you to rotate a previously defined value to a new one.
The ActiveSupport::SecureCompareRotator is a wrapper around ActiveSupport::SecurityUtils.secure_compare

def build_rotation(previous_value, _options) 

def build_rotation(previous_value, _options)
  self.class.new(previous_value)
end

def initialize(value, **_options) 

def initialize(value, **_options)
  @value = value
end

def secure_compare!(other_value, on_rotation: @on_rotation) 

def secure_compare!(other_value, on_rotation: @on_rotation)
  secure_compare(@value, other_value) ||
    run_rotations(on_rotation) { |wrapper| wrapper.secure_compare!(other_value) } ||
    raise(InvalidMatch)
end