angular_rails_csrf 1.0.2 → 1.0.3

checksums.yaml

@@ -1,7 +1,7 @@
---- 
-SHA1: 
-  data.tar.gz: 62475e75b27d64da176d5dcc885d5b64106c2c1f
-  metadata.gz: 0c478c34f6855c22677a8fbf6d65806b9f410d7e
-SHA512: 
-  data.tar.gz: 7bf1f8741a97379e8fb5267e3f729396f345631e304a572146e523189313f0b0df81111f292dc31493ac5d3b74121dea8f2d9f3c799e21e0c25791b5f670cc32
-  metadata.gz: 6f0924910ac9a6cd72627fab243ffbb0413531e25ae2a0eb4f57e6c70f936cd5ec05ef0f1a10121a33514345cef2d6eef1def4dc13cb7021843cca1f40e0acf5
+---
+SHA1:
+  metadata.gz: 8a4290f37bdb3a1f0e3f6be6099cacad746f6a28
+  data.tar.gz: 96045d543d4af0986cd93a694fefe0ac53d7d4f9
+SHA512:
+  metadata.gz: 45891740075e7ff2e5e3f2f54883e332091d06a37c88da6af1d6988a5a6fd3da19a566787a895fe985190f73f69721f13301ced50a5008f28da1f08ce4ee6066
+  data.tar.gz: d48b05aa92b23bdac818e8a8b743713f704fc5fdd6c5aa456279b0c576f2813217a83e6794cf9b38b0547f2233c61dc8becfebc102babea165f96cec7cd4205d

data/lib/angular_rails_csrf/concern.rb

@@ -11,7 +11,11 @@ module AngularRailsCsrf
     end
 
     def verified_request?
-      super || form_authenticity_token == request.headers['X-XSRF-TOKEN']
+      if respond_to?(:valid_authenticity_token?, true)
+        super || valid_authenticity_token?(session, request.headers['X-XSRF-TOKEN'])
+      else
+        super || form_authenticity_token == request.headers['X-XSRF-TOKEN']
+      end
     end
   end
 end

data/lib/angular_rails_csrf/version.rb

@@ -1,3 +1,3 @@
 module AngularRailsCsrf
-  VERSION = "1.0.2"
+  VERSION = "1.0.3"
 end

data/test/dummy/log/test.log

@@ -174,3 +174,47 @@ AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_heade
 Processing by ApplicationController#create as HTML
 Can't verify CSRF token authenticity
 Completed 422 Unprocessable Entity in 0ms
+--------------------------------------------------------------------------------------------------------
+AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
+--------------------------------------------------------------------------------------------------------
+Processing by ApplicationController#index as HTML
+Completed 200 OK in 0ms
+-----------------------------------------------------------------------------
+AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
+-----------------------------------------------------------------------------
+Processing by ApplicationController#create as HTML
+Completed 200 OK in 0ms
+-----------------------------------------------------------------------------------------------------
+AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
+-----------------------------------------------------------------------------------------------------
+Processing by ApplicationController#create as HTML
+Can't verify CSRF token authenticity
+Completed 422 Unprocessable Entity in 0ms
+-------------------------------------------------------------------------------------
+AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
+-------------------------------------------------------------------------------------
+Processing by ApplicationController#create as HTML
+Can't verify CSRF token authenticity
+Completed 422 Unprocessable Entity in 0ms
+--------------------------------------------------------------------------------------------------------
+AngularRailsCsrfTest: test_a_get_sets_the_XSRF-TOKEN_cookie_but_does_not_require_the_X-XSRF-TOKEN_header
+--------------------------------------------------------------------------------------------------------
+Processing by ApplicationController#index as HTML
+Completed 200 OK in 0ms
+-----------------------------------------------------------------------------
+AngularRailsCsrfTest: test_a_post_is_accepted_if_X-XSRF-TOKEN_is_set_properly
+-----------------------------------------------------------------------------
+Processing by ApplicationController#create as HTML
+Completed 200 OK in 0ms
+-----------------------------------------------------------------------------------------------------
+AngularRailsCsrfTest: test_a_post_raises_an_error_with_the_X-XSRF-TOKEN_header_set_to_the_wrong_value
+-----------------------------------------------------------------------------------------------------
+Processing by ApplicationController#create as HTML
+Can't verify CSRF token authenticity
+Completed 422 Unprocessable Entity in 0ms
+-------------------------------------------------------------------------------------
+AngularRailsCsrfTest: test_a_post_raises_an_error_without_the_X-XSRF-TOKEN_header_set
+-------------------------------------------------------------------------------------
+Processing by ApplicationController#create as HTML
+Can't verify CSRF token authenticity
+Completed 422 Unprocessable Entity in 0ms

metadata

@@ -1,49 +1,56 @@
---- !ruby/object:Gem::Specification 
+--- !ruby/object:Gem::Specification
 name: angular_rails_csrf
-version: !ruby/object:Gem::Version 
-  version: 1.0.2
+version: !ruby/object:Gem::Version
+  version: 1.0.3
 platform: ruby
-authors: 
+authors:
 - James Sanders
 autorequire: 
 bindir: bin
 cert_chain: []
-
-date: 2014-09-12 00:00:00 Z
-dependencies: 
-- !ruby/object:Gem::Dependency 
+date: 2014-11-06 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
   name: rake
-  prerelease: false
-  requirement: &id001 !ruby/object:Gem::Requirement 
-    requirements: 
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
     - - ~>
-      - !ruby/object:Gem::Version 
+      - !ruby/object:Gem::Version
         version: 10.1.0
   type: :development
-  version_requirements: *id001
-- !ruby/object:Gem::Dependency 
-  name: rails
   prerelease: false
-  requirement: &id002 !ruby/object:Gem::Requirement 
-    requirements: 
-    - - ">="
-      - !ruby/object:Gem::Version 
-        version: "3"
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ~>
+      - !ruby/object:Gem::Version
+        version: 10.1.0
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '3'
     - - <
-      - !ruby/object:Gem::Version 
-        version: "5"
+      - !ruby/object:Gem::Version
+        version: '5'
   type: :runtime
-  version_requirements: *id002
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - '>='
+      - !ruby/object:Gem::Version
+        version: '3'
+    - - <
+      - !ruby/object:Gem::Version
+        version: '5'
 description: AngularJS style CSRF protection for Rails
-email: 
+email:
 - sanderjd@gmail.com
 executables: []
-
 extensions: []
-
 extra_rdoc_files: []
-
-files: 
+files:
 - MIT-LICENSE
 - README.md
 - Rakefile
@@ -61,32 +68,30 @@ files:
 - test/dummy/log/test.log
 - test/test_helper.rb
 homepage: https://github.com/jsanders/angular_rails_csrf
-licenses: 
+licenses:
 - MIT
 metadata: {}
-
 post_install_message: 
 rdoc_options: []
-
-require_paths: 
+require_paths:
 - lib
-required_ruby_version: !ruby/object:Gem::Requirement 
-  requirements: 
-  - &id003 
-    - ">="
-    - !ruby/object:Gem::Version 
-      version: "0"
-required_rubygems_version: !ruby/object:Gem::Requirement 
-  requirements: 
-  - *id003
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - '>='
+    - !ruby/object:Gem::Version
+      version: '0'
 requirements: []
-
 rubyforge_project: 
 rubygems_version: 2.2.1
 signing_key: 
 specification_version: 4
 summary: Support for AngularJS $http service style CSRF protection in Rails
-test_files: 
+test_files:
 - test/angular_rails_csrf_test.rb
 - test/dummy/app/controllers/application_controller.rb
 - test/dummy/config/application.rb