angular_rails_csrf 7.0.0 → 7.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1d0b9c0281d924d679f0a9b8b71f5d1b4842a4bc9b78ede13f848c3e91479668
-  data.tar.gz: 4efbd91eb24c813ceb2553e2834e5db627cdc4b23c4dedac37ec89e7f5465d80
+  metadata.gz: 93c2203c523539847ce011752c0a50ba0662f1f05aef215343ad3dd8f576cf2c
+  data.tar.gz: 19031ae6c4b9c5c9f4fcfdeadeb0853c7cc4c0fcd592768b833b06447d3ffdfe
 SHA512:
-  metadata.gz: 9cbc548f3e81540ba29b5ca46fa331899337eabd34422e70777e96cbc5ee2443aa962b63bed1ae779f62667389bc761c8bbe1ae2adc2e998426c94290074588b
-  data.tar.gz: '08e800161939ca9a70f9007ba818d4f9d094dea85241329d99d4310e099034e4eaf95254dc08606c4d26be2b98d231d74ef9e80e970a382df0a6cc73945ad5fb'
+  metadata.gz: 9a4a6a941ccb94e0cdcd18b51db96c3efccf2beecaec88a105cd88a377cf8e1700c92cfb9ba555f86cb0f24452ce80c299154cf2704356da37ab240482270e44
+  data.tar.gz: 02431a3ecc99795abcd1d827cb3c1d058e285c12ccb2d3ecb4aa6f788cca4a9cf0e4796f516792aebacdd5d49047d8b077d8900ce4c154c74d420bac6225bb69

data/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 7.0.1 (11-May-25)
+
+* Test with Ruby 3.4
+* Repo moved
+* Add deprecation message
+
 ## 7.0.0 (12-Nov-24)
 
 * **Breaking change**: require Ruby 3.2+. If you need support for older Rubies, stay on version 6

data/README.md

@@ -1,16 +1,32 @@
 ## AngularJS-style CSRF Protection for Rails
 
 ![Gem](https://img.shields.io/gem/v/angular_rails_csrf)
-![CI](https://github.com/jsanders/angular_rails_csrf/actions/workflows/ci.yml/badge.svg)
+![CI](https://github.com/bodrovis/angular_rails_csrf/actions/workflows/ci.yml/badge.svg)
 ![Downloads total](https://img.shields.io/gem/dt/angular_rails_csrf)
 
+**Deprecation notice (2025)**
+
+James and then me (@bodrovis) have been supporting this gem since 2013. It has been downloaded more than 10 million times and we're glad you guys found it useful. However, after discussing privately we've decided to put angular_rails_csrf under passive maintenance starting from June 2025.
+
+In modern frontend–backend architectures (e.g., Angular, React, Vue + Rails APIs), CSRF protection is typically handled via token-based authentication (JWT, OAuth) and not via CSRF cookies. This gem remains relevant only for Rails monoliths that:
+
+- Use cookie-based session auth
+- Serve frontend via Rails
+- Expect `XSRF-TOKEN` / `X-XSRF-TOKEN` pattern
+
+If you're actively using this gem and want to see it maintained or enhanced, please [open an issue](https://github.com/bodrovis/angular_rails_csrf/issues) describing your use case.
+
+Otherwise, this project may be archived in late 2025 or 2026. Thank you!
+
+---
+
 The AngularJS [ng.$http](http://docs.angularjs.org/api/ng.$http) service has built-in CSRF protection. By default, it looks for a cookie named `XSRF-TOKEN` and, if found, writes its value into an `X-XSRF-TOKEN` header, which the server compares with the CSRF token saved in the user's session.
 
 This project adds direct support for this scheme to your Rails application without requiring any changes to your AngularJS application. It also doesn't require the use of `csrf_meta_tags` to write a CSRF token into your page markup, so it works for pure JSON API applications.
 
 Note that there is nothing AngularJS specific here, and this will work with any other front-end that implements the same scheme.
 
-Check [version compatibility](https://github.com/jsanders/angular_rails_csrf/wiki/Version-Compatibility) to learn which Rails/Rubies are currently supported.
+Check [version compatibility](https://github.com/bodrovis/angular_rails_csrf/wiki/Version-Compatibility) to learn which Rails/Rubies are currently supported.
 
 ## Installation
 
@@ -102,7 +118,7 @@ end
 
 ### Exclusions
 
-Sometimes you will want to skip setting the XSRF token for certain controllers (for example, when using SSE or ActionCable, as discussed [here](https://github.com/jsanders/angular_rails_csrf/issues/7)):
+Sometimes you will want to skip setting the XSRF token for certain controllers (for example, when using SSE or ActionCable, as discussed [here](https://github.com/bodrovis/angular_rails_csrf/issues/7)):
 
 ```ruby
 class ExclusionsController < ApplicationController
@@ -128,4 +144,4 @@ $ rake test
 
 ## License
 
-Licensed under the [MIT License](https://github.com/jsanders/angular_rails_csrf/blob/master/LICENSE).
+Licensed under the [MIT License](https://github.com/bodrovis/angular_rails_csrf/blob/master/LICENSE.md).

data/lib/angular_rails_csrf/railtie.rb

@@ -9,5 +9,16 @@ module AngularRailsCsrf
         include AngularRailsCsrf::Concern
       end
     end
+
+    initializer 'angular-rails-csrf.deprecation_notice' do |_app|
+      unless Rails.env.test? || ENV['ANGULAR_RAILS_CSRF_SILENCE']
+        AngularRailsCsrf.deprecator.warn(
+          '[angular_rails_csrf] This gem is under passive maintenance and may be sunset in the future. ' \
+          'Open an issue if you rely on it and want it to live on: ' \
+          'https://github.com/bodrovis/angular_rails_csrf/issues. ' \
+          'Set ANGULAR_RAILS_CSRF_SILENCE to silence this warning.'
+        )
+      end
+    end
   end
 end

data/lib/angular_rails_csrf/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module AngularRailsCsrf
-  VERSION = '7.0.0'
+  VERSION = '7.0.1'
 end

data/lib/angular_rails_csrf.rb

@@ -1,3 +1,9 @@
 # frozen_string_literal: true
 
 require 'angular_rails_csrf/railtie'
+
+module AngularRailsCsrf
+  def self.deprecator
+    @deprecator ||= ActiveSupport::Deprecation.new('7.0', 'angular_rails_csrf')
+  end
+end

metadata

@@ -1,15 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: angular_rails_csrf
 version: !ruby/object:Gem::Version
-  version: 7.0.0
+  version: 7.0.1
 platform: ruby
 authors:
 - James Sanders
 - Ilya Krukowski
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-11-12 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: railties
@@ -47,12 +46,12 @@ files:
 - lib/angular_rails_csrf/concern.rb
 - lib/angular_rails_csrf/railtie.rb
 - lib/angular_rails_csrf/version.rb
-homepage: https://github.com/jsanders/angular_rails_csrf
+homepage: https://github.com/bodrovis/angular_rails_csrf
 licenses:
 - MIT
 metadata:
   rubygems_mfa_required: 'true'
-post_install_message:
+  deprecation_warning: Passive maintenance; may be sunset in 2025-2026. See README.
 rdoc_options: []
 require_paths:
 - lib
@@ -67,8 +66,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.23
-signing_key:
+rubygems_version: 3.6.8
 specification_version: 4
 summary: Support for AngularJS $http service style CSRF protection in Rails
 test_files: []