[ROL-2137] Require rememberme.key to be set

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 5.2.3
• Assignee: David Johnson
• Reporter: David Johnson
• Created: 06/May/19 22:57
• Updated: 26/May/19 13:32
• Resolved: 25/May/19 13:49

Description

If you are going to enable rememberMe in Roller then you really MUST set a unique (and secret) key for Spring Security's remember me feature.

Change Roller so that remember-me will not work unless a ''rememberme.key' property set and it is set to something other than the old default value 'springRocks'

Issue Links

• links to: GitHub Pull Request #27