Session cookie still sent for Rails 4

[dkubb]

I'm not sure if you'd consider this a bug, but I noticed that even when I use session :off the session cookie is still returned in the response. This is under Rails 4.

In general, my reasoning for turning off sessions is so I can ensure a page doesn't use any session data when generating the content; thus making it cacheable. The presence of a Set-Cookie header in the response makes it so I either have to strip this out at some level of the stack, or figure out how to convince Rails to not set the cookie.

[dkubb]

It turns out that you can turn off setting a session cookie by using this in an before_action hook:

request.session_options[:skip] = true

[asia653]

Hi there, do you have a link to the specific docs mentioning this option?

Thanks

[dkubb]

@edwardzyc I can't recall where I found it. I typically would find something like that by reading the source.

[pjg]

@asia653 here's the link to documentation: https://github.com/rack/rack/blob/5dd5911641d9d8fe3f6c39fba8cd7195c3ea28f6/lib/rack/session/abstract/id.rb#L213-L240

[daande]

@dkubb Nice running into you in this thread! 😊