From: Eugen Rochko <eugen@zeonfederated.com>
Date: Fri, 28 Jul 2017 02:36:42 +0000 (+0200)
Subject: Fix #3189 - Share CSRF secret between main app and Sidekiq Web (#4383)
X-Git-Url: https://git.xn--scling-oua.cat.family/?a=commitdiff_plain;h=6270f9ce340ba8e120f743ff9bf1d76224871ca1;p=mastodon.git

Fix #3189 - Share CSRF secret between main app and Sidekiq Web (#4383)
---

diff --git a/config/routes.rb b/config/routes.rb
index ddb4a5b9e..400fa88c5 100644
--- a/config/routes.rb
+++ b/config/routes.rb
@@ -3,6 +3,8 @@
 require 'sidekiq/web'
 require 'sidekiq-scheduler/web'
 
+Sidekiq::Web.set :session_secret, Rails.application.secrets[:secret_key_base]
+
 Rails.application.routes.draw do
   mount LetterOpenerWeb::Engine, at: 'letter_opener' if Rails.env.development?