Rails 5.2 expiry option for signed & encrypted cookies

Mohit Natoo

Mohit Natoo

October 9, 2017

This blog is part of our  Rails 5.2 series.

In Rails 5.1 we have option to set expiry for cookies.

cookies[:username] = {value: "sam_smith", expires: Time.now + 4.hours}

The above code sets cookie which expires in 4 hours.

The expires option, is not supported for signed and encrypted cookies. In other words we are not able to decide on server side when an encrypted or signed cookie would expire.

From Rails 5.2, we'll be able to set expiry for encrypted and signed cookies as well.

cookies.encrypted[:firstname] = { value: "Sam", expires: Time.now + 1.day }

# sets string `Sam` in an encrypted `firstname` cookie for 1 day.

cookies.signed[:lastname] = {value: "Smith", expires: Time.now + 1.hour }

# sets string `Smith` in a signed `lastname` cookie for 1 hour.

Apart from this, in Rails 5.1, we needed to provide an absolute date/time value for expires option.


# setting cookie for 90 minutes from current time.

cookies[:username] = {value: "Sam", expires: Time.now + 90.minutes}

Starting Rails 5.2, we'll be able to set the expires option by giving a relative duration as value.


# setting cookie for 90 minutes from current time.

cookies[:username] = { value: "Sam", expires: 90.minutes }

# After 1 hour

> cookies[:username]
> #=> "Sam"

# After 2 hours

> cookies[:username]
> #=> nil
> ~~~

If this blog was helpful, check out our full blog archive.

Stay up to date with our blogs.

Subscribe to receive email notifications for new blog posts.