15 lines
545 B
Ruby
15 lines
545 B
Ruby
# Copyright (C) 2012-2021 Zammad Foundation, http://zammad-foundation.org/
|
|
|
|
# This migration removes all pre-existing user sessions
|
|
# so that they can be replaced with sessions that use "secure cookies".
|
|
# It is skipped on non-HTTPS deployments
|
|
# because those are incompatible with secure cookies anyway.
|
|
class ForgetInsecureSessions < ActiveRecord::Migration[5.2]
|
|
def up
|
|
return if !Setting.exists?(name: 'system_init_done')
|
|
return if Setting.get('http_type') != 'https'
|
|
|
|
ActiveRecord::SessionStore::Session.destroy_all
|
|
end
|
|
end
|