update docs to reflect that you should update your signing key

syntaqx · Jun 30, 2024 · 0275f35 · 0275f35
1 parent 9b36901
commit 0275f35
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/README.md b/README.md
@@ -106,8 +106,9 @@ if err != nil {
 
 ### Signing Key
 
-By default, the signing key is set to `cookie.DefaultSigningKey`. If you want to
-change the signing key, you can set it using the `cookie.SigningKey` variable:
+By default, the signing key is set to `[]byte(cookie.DefaultSigningKey)`. You
+should change this signing key for your application by assigning the
+`cookie.SigningKey` variable to a secret value of your own:
 
 ```go
 cookie.SigningKey = []byte("my-secret-key")

diff --git a/cookie.go b/cookie.go
@@ -15,12 +15,13 @@ import (
 )
 
 const (
-	CookieTag = "cookie"
+	CookieTag         = "cookie"
+	DefaultSigningKey = "default-signing-key"
 )
 
 var (
 	// SigningKey is the key used to sign cookies.
-	SigningKey = []byte("default-signing-key")
+	SigningKey = []byte(DefaultSigningKey)
 )
 
 var (