# Sharing session between 1.2.3 and 2.3.2 apps

**URL:** <https://www.ruby-forum.com/t/sharing-session-between-1-2-3-and-2-3-2-apps/172088>\
**Category:** Rails\
**Created:** [July 14, 2009, 3:06pm UTC](https://www.ruby-forum.com/t/sharing-session-between-1-2-3-and-2-3-2-apps/172088 "2009-07-14T15:06:37Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![chuvisco](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/e47c2d/32.png) [@chuvisco](https://www.ruby-forum.com/u/chuvisco)\
**Post date:** [July 14, 2009, 3:06pm UTC](https://www.ruby-forum.com/t/sharing-session-between-1-2-3-and-2-3-2-apps/172088/1 "2009-07-14T15:06:37Z")

</div>

Hello,

I have an old, huge, awful 1.2.3 rails application. I can’t upgrade it  
and I must integrate it with a new 2.3.2 rails app, by sharing sessions.  
I’ve tried a lot of things, dirty things indeed, but that didn’t work.  
Does anybody know a way to do this job?

Last thing I tried, unsuccessfully, was config 1.2.3 app this way:

ActionController::CgiRequest::DEFAULT\_SESSION\_OPTIONS.update(:session\_key  
=\> ‘\_something\_here’)  
ActionController::CgiRequest::DEFAULT\_SESSION\_OPTIONS.update(:session\_id  
=\>  
‘a0cd7a049e27f77c8ca73fd590552776e47de47e3c7a44638bd4ab8add7140c11edd892a4d9d019d643a068c88d1a30c72b544b453ccdd8774a17ac589112081c779f51834a567314b95a0cdda01fe977b16440b721f6fde71ce0130b70c5bf90d1066bdef4e5ec08dca457522b0b399cf4567603b377efb28f701fc78’)

And this in 2.3.2 app;

ActionController::Base.session = {  
:key =\> ‘\_something\_here’,  
:secret =\>  
‘a0cd7a049e27f77c8ca73fd590552776e47de47e3c7a44638bd4ab8add7140c11edd892a4d9d019d643a068c88d1a30c72b544b453ccdd8774a17ac589112081c779f51834a567314b95a0cdda01fe977b16440b721f6fde71ce0130b70c5bf90d1066bdef4e5ec08dca457522b0b399cf4567603b377efb28f701fc78’  
}

Thanks in advance.

Marcia

---

<div class="post-metadata">

**Author:** ![chuvisco](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/e47c2d/32.png) [@chuvisco](https://www.ruby-forum.com/u/chuvisco)\
**Post date:** [July 15, 2009, 10:06am UTC](https://www.ruby-forum.com/t/sharing-session-between-1-2-3-and-2-3-2-apps/172088/2 "2009-07-15T10:06:53Z")

</div>

Best of luck getting this to work - I don’t think the two mechanisms  
are directly compatible. It may actually be _less_ painful to set up  
something like RubyCAS to do the signon.

BTW: 1.2.3 has a number of known security holes, including some issues  
with possible session fixation attacks. You may want to at least try  
to upgrade to a higher version in the 1.2.x series.

–Matt J.

On Jul 14, 9:06 am, Marcia A. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)

---

<div class="post-metadata">

**Author:** ![chuvisco](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/c/e47c2d/32.png) [@chuvisco](https://www.ruby-forum.com/u/chuvisco)\
**Post date:** [July 15, 2009, 2:03pm UTC](https://www.ruby-forum.com/t/sharing-session-between-1-2-3-and-2-3-2-apps/172088/3 "2009-07-15T14:03:26Z")

</div>

Thanks, Matt. I’ll do that.

Matt J. wrote:

> Best of luck getting this to work - I don’t think the two mechanisms  
> are directly compatible. It may actually be _less_ painful to set up  
> something like RubyCAS to do the signon.
> 
> BTW: 1.2.3 has a number of known security holes, including some issues  
> with possible session fixation attacks. You may want to at least try  
> to upgrade to a higher version in the 1.2.x series.
> 
> –Matt J.
> 
> On Jul 14, 9:06�am, Marcia A. [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid)