artirix-cacheable-csrf-token-rails 0.3.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: b4bae3ba6901d26848fd4c1036d9287e019450d1
+  data.tar.gz: 5790ce6995354510363850f0009d45f23950def2
+SHA512:
+  metadata.gz: 1a18a8c15c4fbb1dd686fc7a8ff5d0939e532494c767c31ead75b5d32ca07f1e158c2f038a9111c0cab95eb1de6e564ea4539dbbc7101fa042debf835900e4f5
+  data.tar.gz: d8930a052dcc39d41628c48ac0d9c4e710b5fa14cabd9a791a2b5236fd9b9132056c10c3c2c5694d36f2ddf397377f35a4acfa606bb9edc8e413ff701394ef93

data/README.md

@@ -0,0 +1,16 @@
+# Cacheable CSRF Token for Rails
+
+### Cache HTML containing CSRF protection tokens without worrying
+
+CacheableCSRFToken allows you to easily cache Ruby on Rails pages or partials containing a CSRF protection token. The user-specific token will inserted in the HTML before the response is sent to the user.
+
+### Compatibility
+
+Rails 4 and above
+
+
+#### Usage
+
+1. Add `cacheable-csrf-token-rails` to your Gemfile
+2. Add this line in ApplicationController:
+    `include CacheableCSRFTokenRails`

data/lib/cacheable-csrf-token-rails.rb

@@ -0,0 +1,47 @@
+# Inspired from http://www.jarrodspillers.com/2010/02/06/trying-to-use-rails-csrf-protection-on-cached-actions-rack-middleware-to-the-rescue/ and https://gist.github.com/1124982/632f1fcbe0981424128b3088ddb27a322c369cc1
+# Extended https://github.com/cmer/cacheable-csrf-token-rails
+
+module CacheableCSRFTokenRails
+  def self.included(base)
+
+    ApplicationController.const_set "TOKEN_PLACEHOLDER", "__CROSS_SITE_REQUEST_FORGERY_PROTECTION_TOKEN__"
+    base.class_eval do
+      after_filter  :inject_csrf_token
+
+      private
+      def inject_csrf_token
+        if protect_against_forgery? && token = form_authenticity_token
+          if body_with_token = response.body.gsub!(ApplicationController::TOKEN_PLACEHOLDER, token)
+            response.body = body_with_token
+          end
+        end
+      end
+    end
+
+    token_tag_helper = (Rails::VERSION::MAJOR >= 4) ? ActionView::Helpers::UrlHelper : ActionView::Helpers::FormTagHelper
+
+    token_tag_helper.class_eval do
+      alias_method :token_tag_rails, :token_tag
+
+      def token_tag(token=nil)
+        if token != false && protect_against_forgery?
+          tag(:input, :type => "hidden", :name => request_forgery_protection_token.to_s, :value => ApplicationController::TOKEN_PLACEHOLDER)
+        else
+          ''
+        end
+      end
+    end
+
+    ActionView::Helpers::CsrfHelper.class_eval do
+      def csrf_meta_tags
+        if protect_against_forgery?
+          [
+            tag('meta', :name => 'csrf-param', :content => request_forgery_protection_token),
+            tag('meta', :name => 'csrf-token', :content => ApplicationController::TOKEN_PLACEHOLDER)
+          ].join("\n").html_safe
+        end
+      end
+    end
+
+  end # included
+end

metadata

@@ -0,0 +1,62 @@
+--- !ruby/object:Gem::Specification
+name: artirix-cacheable-csrf-token-rails
+version: !ruby/object:Gem::Version
+  version: 0.3.1
+platform: ruby
+authors:
+- Faheem Mughal
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2015-07-31 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rails
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.2.5
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 3.2.5
+description: CacheableCSRFToken allows you to easily cache Ruby on Rails pages or
+  partials containing a CSRF protection token. The user-specific token will inserted
+  in the HTML before the response is sent to the user.
+email:
+- faheem@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- README.md
+- lib/cacheable-csrf-token-rails.rb
+homepage: https://github.com/faheemmughal/cacheable-csrf-token-rails
+licenses: []
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.3
+signing_key: 
+specification_version: 4
+summary: Cache HTML containing CSRF protection tokens without worrying
+test_files: []
+has_rdoc: