Skip to content

Instantly share code, notes, and snippets.

@yetanothernguyen
Created April 6, 2015 11:53
Show Gist options
  • Save yetanothernguyen/604a5a4dbec375ee5685 to your computer and use it in GitHub Desktop.
Save yetanothernguyen/604a5a4dbec375ee5685 to your computer and use it in GitHub Desktop.
Decrypt Rails 4 session cookie
cookie = CGI.unescape("cookie here")
secret_key_base = "secret key here"
encrypted_cookie_salt = "encrypted cookie"
encrypted_signed_cookie_salt = "signed encrypted cookie"
key_generator = ActiveSupport::KeyGenerator.new(secret_key_base, iterations: 1000)
secret = key_generator.generate_key(encrypted_cookie_salt)
sign_secret = key_generator.generate_key(encrypted_signed_cookie_salt)
encryptor = ActiveSupport::MessageEncryptor.new(secret, sign_secret, serializer: ActiveSupport::MessageEncryptor::NullSerializer)
encryptor.decrypt_and_verify(cookie)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment