Storing Objects in a Session in Rails

by

The main reason not to store objects in the session is that if the object structure changes, you will get an exception. Consider the following:

class Foo
  attr_accessor :bar
end

class Bar
end

foo = Foo.new
foo.bar = Bar.new
put_in_session(foo)

Then, in a subsequent release of the project, you change Bar’s name. You reboot the server, and try to grab foo out of the session. When it tries to deserialize, it fails to find Bar and explodes.

It might seem like it would be easy to avoid this pitfall, but in practice, I’ve seen it bite a number of people. This is just because serializing an object can sometimes take more along with it than is immediately apparent (this sort of thing is supposed to be transparent) and unless you have rigorous rules about this, things will tend to get flummoxed up.

The reason it’s normally frowned upon is that it’s extremely common for this to bite people in ActiveRecord, since it’s quite common for the structure of your app to shift over time, and sessions can be deserialized a week or longer after they were originally created.

If you understand all that and are willing to put in the energy to be sure that your model does not change and is not serializing anything extra, you’re probably fine. But be careful 🙂

More Related Contents:

  1. Rails: Access to current_user from within a model in Ruby on Rails
  2. Rails sessions current practices
  3. Rails 3 disabling session cookies
  4. Boolean Validation
  5. Format a string containing Phone numbers
  6. How to understand nil vs. empty vs. blank in Ruby
  7. What is the easiest way to duplicate an activerecord record?
  8. How to solve error “Missing `secret_key_base` for ‘production’ environment” (Rails 4.1)
  9. How can I avoid running ActiveRecord callbacks?
  10. Rails 4: List of available datatypes
  11. How does instance_eval work and why does DHH hate it?
  12. How to create a deep copy of an object in Ruby?
  13. Is there a clean way to avoid calling a method on nil in a nested params hash? [duplicate]
  14. Ruby 2.4 and Rails 4 stack level too deep (SystemStackError)
  15. Custom authentication strategy for devise
  16. Using Process.spawn as a replacement for Process.fork
  17. Rails 3, has_one / has_many with lambda condition
  18. Rails update_attributes without save?
  19. how to solve “ruby installation is missing psych” error?
  20. Detect MIME type of uploaded file in Ruby
  21. Pass a variable into a partial, rails 3?
  22. Uniq by object attribute in Ruby
  23. visit_Psych_Nodes_Alias: Unknown alias: default (Psych::BadAlias)
  24. What does do in rails erb?
  25. Why does installing Ruby on Rails generate error “size of array ‘ruby_check_sizeof_voidp’ is negative”?
  26. JSON encoding wrongly escaped (Rails 3, Ruby 1.9.2)
  27. What is the difference between pluck and collect in Rails?
  28. Looking for suggestions for building a secure REST API within Ruby on Rails
  29. Installing Ruby on Rails – Mac OS Lion
  30. Ruby: Create range of dates

Leave a Comment