aris 1.4.2 → 1.5.1

data/lib/aris/response_helpers.rb

@@ -1,5 +1,6 @@
 # lib/aris/response_helpers.rb
 require 'json'
+require 'time'
 
 module Aris
   module ResponseHelpers
@@ -73,6 +74,37 @@ module Aris
       redirect(path, status: status)
     end
     
+    # --- Cookies -----------------------------------------------------------
+    # Available on every response (Rack and Mock). Emits Rack 3 compliant
+    # headers: the key is lowercase `set-cookie`, and several cookies become
+    # an Array of values instead of a comma-joined string (which browsers
+    # cannot parse).
+    #
+    #   res.set_cookie('theme', 'dark', max_age: 3600)
+    #   res.set_cookie('sid', token, httponly: true, secure: true, same_site: :lax)
+    #   res.delete_cookie('sid')
+    #
+    # Defaults come from Aris::Config.cookie_options.
+    def set_cookie(name, value, options = {})
+      merged = (Aris::Config.cookie_options || {}).merge(options)
+      parts = ["#{name}=#{value}"]
+      parts << "Domain=#{merged[:domain]}" if merged[:domain]
+      parts << "Path=#{merged[:path]}" if merged[:path]
+      parts << "Max-Age=#{merged[:max_age]}" if merged.key?(:max_age) && !merged[:max_age].nil?
+      parts << "Expires=#{merged[:expires].httpdate}" if merged[:expires].respond_to?(:httpdate)
+      parts << "HttpOnly" if merged[:httponly]
+      parts << "Secure" if merged[:secure]
+      if merged[:same_site]
+        parts << "SameSite=#{merged[:same_site].to_s.capitalize}"
+      end
+      add_set_cookie_header(parts.join('; '))
+      self
+    end
+
+    def delete_cookie(name, options = {})
+      set_cookie(name, '', options.merge(max_age: 0, expires: Time.at(0).utc))
+    end
+
     # No content response
     def no_content
       self.status = 204
@@ -115,6 +147,15 @@ module Aris
     end
     
     private
+
+    def add_set_cookie_header(cookie_string)
+      existing = headers['set-cookie']
+      headers['set-cookie'] = case existing
+                              when nil then cookie_string
+                              when Array then existing + [cookie_string]
+                              else [existing, cookie_string]
+                              end
+    end
     
     def detect_content_type(file_path)
       # Handle Tempfile paths that may have random extensions

data/lib/aris/router.rb

@@ -696,6 +696,13 @@ module Aris
         path.length > 1 && path.end_with?('/') ? path.chomp('/') : path
       end
       
+      # Servers hand PATH_INFO over as raw bytes (ASCII-8BIT). Path params must be
+      # text: a binary "coop" is a BLOB to SQLite and never equals the text 'coop'.
+      unless normalized.encoding == Encoding::UTF_8
+        normalized = normalized.dup.force_encoding(Encoding::UTF_8)
+        normalized = normalized.scrub unless normalized.valid_encoding?
+      end
+
       if normalized.include?('%')
         begin
           normalized = URI.decode_www_form_component(normalized)

data/lib/aris/version.rb

@@ -1,3 +1,3 @@
 module Aris
-  VERSION = "1.4.2"
-end
+  VERSION = "1.5.1"
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aris
 version: !ruby/object:Gem::Version
-  version: 1.4.2
+  version: 1.5.1
 platform: ruby
 authors:
 - Steven Garcia
@@ -87,8 +87,33 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- CHANGELOG.md
 - LICENSE.txt
 - README.md
+- docs/ADAPTERS.md
+- docs/ARCHITECTURE.md
+- docs/CONTENT.md
+- docs/PERFORMANCE.md
+- docs/PLUGIN_DEVELOPMENT.md
+- docs/USAGE.md
+- docs/plugins/API_KEY_AUTH.md
+- docs/plugins/BASIC_AUTH.md
+- docs/plugins/BEARER_AUTH.md
+- docs/plugins/CACHE.md
+- docs/plugins/COMPRESSION.md
+- docs/plugins/COOKIES.md
+- docs/plugins/CORS.md
+- docs/plugins/CSRF.md
+- docs/plugins/ETAG.md
+- docs/plugins/FORM_PARSER.md
+- docs/plugins/HEALTH_CHECK.md
+- docs/plugins/JSON.md
+- docs/plugins/MULTIPART.md
+- docs/plugins/RATE_LIMITER.md
+- docs/plugins/REQUEST_ID.md
+- docs/plugins/REQUEST_LOGGER.md
+- docs/plugins/SECURITY.md
+- docs/plugins/SESSION.md
 - lib/aris.rb
 - lib/aris/adapters/base.rb
 - lib/aris/adapters/joys_integration.rb
@@ -132,7 +157,10 @@ files:
 homepage: https://github.com/activestylus/aris
 licenses:
 - MIT
-metadata: {}
+metadata:
+  source_code_uri: https://github.com/activestylus/aris
+  changelog_uri: https://github.com/activestylus/aris/blob/main/CHANGELOG.md
+  rubygems_mfa_required: 'true'
 rdoc_options: []
 require_paths:
 - lib
@@ -147,7 +175,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.9
+rubygems_version: 4.0.17
 specification_version: 4
 summary: Fast, elegant Ruby web framework
 test_files: []