@nuxt/docs-nightly 5.0.0-29835892.99af6dec → 5.0.0-29836350.ccbf4a57
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -35,6 +35,8 @@ Public runtime config is accessible in Vue templates with `$config.public`.
|
|
|
35
35
|
|
|
36
36
|
### Application Secret
|
|
37
37
|
|
|
38
|
+
Runtime config keys prefixed with `app` are reserved for Nuxt (currently `runtimeConfig.app` and `runtimeConfig.appSecret`). Do not use them for your own values.
|
|
39
|
+
|
|
38
40
|
Nuxt provides a private `runtimeConfig.appSecret` as the application's root secret. Modules and server features derive their own secrets from it with [`deriveSecret`](/docs/guide/going-further/server-imports#deriving-secrets), and the [session helpers](/docs/guide/going-further/server-imports#sessions) seal with one by default. The value defaults to an empty string, is only available on the server, and you can set it with `NUXT_APP_SECRET` without declaring the key in `nuxt.config`.
|
|
39
41
|
|
|
40
42
|
Generate a secret that contains at least 32 random bytes:
|
|
@@ -47,7 +49,7 @@ openssl rand -base64 32
|
|
|
47
49
|
Use a different value for each environment, but keep it stable across deployments and server instances within that environment. Changing the value invalidates any sessions or signatures that depend on it.
|
|
48
50
|
::
|
|
49
51
|
|
|
50
|
-
In development, Nuxt generates a random secret and stores it in `.nuxt/app-secret` when `
|
|
52
|
+
In development, Nuxt generates a random secret and stores it in `.nuxt/app-secret` only when `appSecret` is unset, so features that depend on it work without any setup. A configured value is always used as is. Nuxt logs a warning the first time a derived secret is used with the generated value. Builds never generate one: set `NUXT_APP_SECRET` in every environment you deploy to.
|
|
51
53
|
|
|
52
54
|
Nuxt does not require `NUXT_APP_SECRET` unless a module or server feature uses it.
|
|
53
55
|
|