在 Rails 6 上定义 Secret_key_base 的正确方法是什么？

正确的定义方式是什么secret_key_base既然我们已经有了每个环境的凭据，就可以在 Rails 6 上使用了吗？

我的环境有变量SECRET_KEY_BASE但 Rails 并没有接受它。我尝试定义secret_key_base in config\credentials\production.yml.enc但它没有影响Rails.application.credentials.secret_key_base

I know config/secrets.yml with

staging:
  secret_key_base: <%= ENV["SECRET_KEY_BASE"] %>

production:
  secret_key_base: <%= ENV["SECRET_KEY_BASE"] %>

可行，但是，这是 Rails 6 的方式吗？

访问和检查的正确方法secret_key_base在 Rails 6 中不再是：~

Rails.application.credentials.secret_key_base

现在是：

Rails.application.secret_key_base

我不确定这是 Rails 6 还是一直都是这样。当查看这个方法及其实现时，这一点就变得非常清楚：

https://github.com/rails/rails/blob/09a2979f75c51afb797dd60261a8930f84144af8/railties/lib/rails/application.rb#L410-L427 https://github.com/rails/rails/blob/09a2979f75c51afb797dd60261a8930f84144af8/railties/lib/rails/application.rb#L410-L427

# The secret_key_base is used as the input secret to the application's key generator, which in turn
# is used to create all MessageVerifiers/MessageEncryptors, including the ones that sign and encrypt cookies.
#
# In development and test, this is randomly generated and stored in a
# temporary file in <tt>tmp/development_secret.txt</tt>.
#
# In all other environments, we look for it first in ENV["SECRET_KEY_BASE"],
# then credentials.secret_key_base, and finally secrets.secret_key_base. For most applications,
# the correct place to store it is in the encrypted credentials file.
def secret_key_base
  if Rails.env.development? || Rails.env.test?
    secrets.secret_key_base ||= generate_development_secret
  else
    validate_secret_key_base(
      ENV["SECRET_KEY_BASE"] || credentials.secret_key_base || secrets.secret_key_base
    )
  end
end

开发和测试模式都有自己的密钥库生成和存储方式。对于其他一切，它会按顺序从环境、凭证或秘密中获取。