# Config.action\_controller.session :secret how can I check against it?

**URL:** <https://www.ruby-forum.com/t/config-action-controller-session-secret-how-can-i-check-against-it/126829>\
**Category:** Rails\
**Created:** [January 22, 2008, 4:52pm UTC](https://www.ruby-forum.com/t/config-action-controller-session-secret-how-can-i-check-against-it/126829 "2008-01-22T16:52:57Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Erwin](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/e/a88e57/32.png) [@Erwin](https://www.ruby-forum.com/u/Erwin)\
**Post date:** [January 22, 2008, 4:52pm UTC](https://www.ruby-forum.com/t/config-action-controller-session-secret-how-can-i-check-against-it/126829/1 "2008-01-22T16:52:57Z")

</div>

checking against the secret key is performed whenever a POST is sent  
to my webservice

but how can I perform such control for other REST actions like GET

I can pass the secret key as a parameter, but it’s not secret  
anymore …

erwin