method

create_new_id

Ruby latest stable (v2_5_5) - 0 notes - Class: CGI::Session

1_8_6_287 (0)
1_8_7_72 (0)
1_8_7_330 (0)
1_9_1_378 (-7)
1_9_2_180 (-1)
1_9_3_125 (0)
1_9_3_392 (0)
2_1_10 (0)
2_2_9 (0)
2_4_6 (38)
2_5_5 (0)
2_6_3 (0)
What's this?

create_new_id() private

Create a new session id.

The session id is a secure random number by SecureRandom if possible, otherwise an SHA512 hash based upon the time, a random number, and a constant string. This routine is used internally for automatically generated session ids.

Show source

# File lib/cgi/session.rb, line 171
    def create_new_id
      require 'securerandom'
      begin
        # by OpenSSL, or system provided entropy pool
        session_id = SecureRandom.hex(16)
      rescue NotImplementedError
        # never happens on modern systems
        require 'digest'
        d = Digest('SHA512').new
        now = Time::now
        d.update(now.to_s)
        d.update(String(now.usec))
        d.update(String(rand(0)))
        d.update(String($$))
        d.update('foobar')
        session_id = d.hexdigest[0, 32]
      end
      session_id
    end

create_new_id

Related methods