On 19/11/2012, at 2:57 PM, Clifford Heath <[email protected]> wrote:
> The ticket contains the checksum (SHA-1 or whatever) of: > * a shared secret > * the current time, rounded to the nearest five minutes > * the domain being served (the same server may serve users from multiple > domains) > * the user's name > This ticket also contains the user name and domain in plain text. OpenSSL::HMAC with SHA1 or stronger digest is good for this: http://www.ruby-doc.org/stdlib-1.9.3/libdoc/openssl/rdoc/OpenSSL/HMAC.html — Paul -- You received this message because you are subscribed to the Google Groups "Ruby or Rails Oceania" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/rails-oceania?hl=en.
