rack/rack — pull request #263 by will (2011-11-13 03:15:16+00:00)
Title: Enable graceful secret rotation in Rack::Cookie

Adds `:old_secret` option to Rack::Cookie for graceful key rotation

`:old_secret` is accept-only, new cookies are signed with the primary `:secret` option (or not if `:secret` is not set)

Without this, any change in keys kills sessions for everyone, which makes any sort of auto key rotation a pain for users.