auto-session-timeout 0.9.2 → 0.9.7

checksums.yaml

@@ -1,15 +1,7 @@
 ---
-!binary "U0hBMQ==":
-  metadata.gz: !binary |-
-    MzgzYWM4ODdjNTcwYWI5MmMxZDA0ZDc3NjBjYzRlNmJiN2Q4ZDk3OQ==
-  data.tar.gz: !binary |-
-    ZTU4MzEyZDc4OTE4YmVmZWM2NmUwY2EwYTI2YjcxZjU1NzRiZDM4NA==
-!binary "U0hBNTEy":
-  metadata.gz: !binary |-
-    MmFiZGY1NjI4M2M2ZTUzNTZlNmM3OTY5ZjBjM2QyNjA2ZDZkZjE0ODIyYzg1
-    MDhhZjQ1MmE4Y2RmMTYxNzQwMDMxZWI1NzhjYmYzMmZiNTYyZjI0M2NiNWFi
-    MDdjZmUzMTlmOTliODc3OTAxNTExOTdjYTExOTY0ODk2ZTcyYTU=
-  data.tar.gz: !binary |-
-    ZGZkMjVmNjA5ZjU0YjYxMmJhMjZhYTI3ZTU4YjZlYzRhZjQ5YTNlODkzNmY4
-    NjQyZmM4YzI5Mjk3MmIxOGMxYWU1NmI1NDc3OWFiZjJmZWMwNGI4ZjA4NDI0
-    NDZlNGJjZDQ5NmFjNThmM2RkZDg5ZmU5NzBkOGVmZGRhNmMyYzg=
+SHA256:
+  metadata.gz: fc498b02e7b05cbf09f3af63eb7f83617970fa76287e7beb522e2b676df6c6a0
+  data.tar.gz: fad257ffc2872343879ab12346d6d029c5df75e3ec7eb0913e61f441afa5250b
+SHA512:
+  metadata.gz: 58db2799f2c39e9f4107bbdd21b95a563786e5e1bed28670ff0f0d04d86596c0690846a8d07c71b92804d584a40704295539b06115e52eb538a4f5693f20152a
+  data.tar.gz: 0ba4a07545611dd012b465e9f21eb6768de9dd588ef4c9bb2c1815bc3253bab062c360443b088c5083cfc524b0e563193edaa86307ba00f8078f4d9064eaabb6

data/.travis.yml

@@ -0,0 +1,41 @@
+sudo: false
+language: ruby
+cache: bundler
+before_install:
+  - gem uninstall -v '>= 2' -i $(rvm gemdir)@global -ax bundler || true
+  - gem install bundler -v '< 2'
+rvm:
+  - 2.4.9
+  - 2.5.7
+  - 2.6.5
+  - 2.7.0
+  - ruby-head
+env:
+  - RAILS_VERSION='~> 3.2'
+  - RAILS_VERSION='~> 4.0'
+  - RAILS_VERSION='~> 4.1'
+  - RAILS_VERSION='~> 4.2'
+  - RAILS_VERSION='~> 5.0'
+  - RAILS_VERSION='~> 5.1'
+  - RAILS_VERSION='~> 5.2'
+jobs:
+  exclude:
+    - rvm: 2.7.0
+      env: RAILS_VERSION='~> 3.2'
+    - rvm: 2.7.0
+      env: RAILS_VERSION='~> 4.0'
+    - rvm: 2.7.0
+      env: RAILS_VERSION='~> 4.1'
+    - rvm: 2.7.0
+      env: RAILS_VERSION='~> 4.2'
+    - rvm: ruby-head
+      env: RAILS_VERSION='~> 3.2'
+    - rvm: ruby-head
+      env: RAILS_VERSION='~> 4.0'
+    - rvm: ruby-head
+      env: RAILS_VERSION='~> 4.1'
+    - rvm: ruby-head
+      env: RAILS_VERSION='~> 4.2'
+  allow_failures:
+    - rvm: ruby-head
+  fast_finish: true

data/CHANGELOG

@@ -1,3 +1,55 @@
-6/22/13 - Switched to Bundler for generating the gemspec [Matthew Bass]
+2021-02-02 - v0.9.7
 
-4/22/09 - Initial import [Matthew Bass]
+2021-02-02 - Rails 6 compatibility [jasonheecs]
+
+2019-10-15 - v0.9.6
+
+2019-10-15 - Use routes in JS helper [pelargir]
+
+2019-03-03 - Update README [cprodhomme]
+
+2018-12-21 - Support Rails protect_from_forgery [davegudge]
+
+2017-06-13 - v0.9.5
+
+2017-06-12 - Exclude controller actions from CSRF verification [pelargir]
+
+2017-06-12 - Make updater use vanilla JS [emilos]
+
+2017-05-16 - v0.9.4
+
+2017-05-08 - Rails 5 compatibility [quainjn]
+
+2016-10-14 - Allow defining verbosity [zaimramlan]
+
+2013-08-29 - v0.9.3
+
+2013-08-28 - Add jQuery support [krishnasrihari]
+
+2013-07-24 - v0.9.2
+
+2013-07-24 - Add tests and use Ruby 1.9 hash syntax [pelargir]
+
+2013-07-24 - v0.9.1
+
+2013-07-24 - Timeout can be set in controller or user model [pelargir]
+
+2013-07-22 - v0.9
+
+2013-07-21 - Support for jQuery periodical updater plugin [pelargir]
+
+2013-07-17 - v0.8
+
+2014-07-14 - Added jQuery support [krishnasrihari]
+
+2013-06-23 - v0.7
+
+2013-06-22 - Switched to Bundler for generating the gemspec [pelargir]
+
+2009-08-22 - v0.5
+
+2009-06-03 - Move controller actions into plugin [pelargir]
+
+2009-04-22 - Add JS helper [pelargir]
+
+2009-04-22 - Initial import [pelargir]

data/Gemfile

@@ -1,4 +1,7 @@
 source 'https://rubygems.org'
 
+rails_version = ENV['RAILS_VERSION']
+gem 'actionpack', rails_version
+
 # Specify your gem's dependencies in auto-session-timeout.gemspec
 gemspec

data/README.md

@@ -1,16 +1,20 @@
-# auto-session-timeout
+[![Build Status](https://travis-ci.com/pelargir/auto-session-timeout.svg?branch=master)](https://travis-ci.com/pelargir/auto-session-timeout)
+
+# Auto::Session::Timeout
 
 Provides automatic session timeout in a Rails application. Very easy
 to install and configure. Have you ever wanted to force your users
 off your app if they go idle for a certain period of time? Many
 online banking sites use this technique. If your app is used on any
-kind of public computer system, this plugin is a necessity.
+kind of public computer system, this gem is a necessity.
 
 ## Installation
 
 Add this line to your application's Gemfile:
 
-    gem 'auto-session-timeout'
+```ruby
+gem 'auto-session-timeout'
+```
 
 And then execute:
 
@@ -24,52 +28,80 @@ Or install it yourself as:
 
 After installing, tell your application controller to use auto timeout:
 
-    class ApplicationController < ActionController::Base
-      auto_session_timeout 1.hour
-      ...
-    end
-
-You will also need to insert this line inside the body tags in your
-views. The easiest way to do this is to insert it once inside your
-default or application-wide layout. Make sure you are only rendering
-it if the user is logged in, otherwise the plugin will attempt to force
-non-existent sessions to timeout, wreaking havoc:
-
-    <body>
-      <% if current_user %>
-        <%= auto_session_timeout_js %>
-      <% end %>
-    </body>
+```ruby
+class ApplicationController < ActionController::Base
+  auto_session_timeout 1.hour
+  ...
+end
+```
+
+This will use a global timeout of 1 hour. If you want to specify a
+custom timeout value per user, don't pass a value above. Instead,
+override `#auto_timeout` in your `#current_user` model. This is
+typically the `User` class:
+
+```ruby
+class ApplicationController < ActionController::Base
+  auto_session_timeout
+end
+
+class User < ActiveRecord::Base
+  def auto_timeout
+    15.minutes
+  end
+end
+```
+
+You will also need to insert a call to the `#auto_session_timeout_js`
+helper method inside the body tags in your views. The easiest way to
+do this is to insert it once inside your default or application-wide
+layout. Make sure you are only rendering if the user is logged in,
+otherwise the gem will attempt to force non-existent sessions to
+timeout, wreaking havoc:
+
+```erb
+<body>
+  <% if current_user %>
+    <%= auto_session_timeout_js %>
+  <% end %>
+</body>
+```
 
 You need to setup two actions: one to return the session status and
 another that runs when the session times out. You can use the default
-actions included with the plugin by inserting this line in your target
+actions included with the gem by inserting this line in your target
 controller (most likely your user or session controller):
 
-    class SessionsController < ApplicationController
-      auto_session_timeout_actions
-    end
+```ruby
+class SessionsController < ApplicationController
+  auto_session_timeout_actions
+end
+```
 
 To customize the default actions, simply override them. You can call
-the render_session_status and render_session_timeout methods to use
-the default implementation from the plugin, or you can define the
+the `#render_session_status` and `#render_session_timeout` methods to
+use the default implementation from the gem, or you can define the
 actions entirely with your own custom code:
 
-    class SessionsController < ApplicationController
-      def active
-       render_session_status
-      end
-      
-      def timeout
-        render_session_timeout
-      end
-    end
+```ruby
+class SessionsController < ApplicationController
+  def active
+   render_session_status
+  end
+
+  def timeout
+    render_session_timeout
+  end
+end
+```
 
-In any of these cases, make sure to properly map the actions in
-your routes.rb file:
+In any of these cases, make sure to properly map the actions in your
+routes.rb file:
 
-    match 'active'  => 'sessions#active',  via: :get
-    match 'timeout' => 'sessions#timeout', via: :get
+```ruby
+get 'active'  => 'sessions#active'
+get 'timeout' => 'sessions#timeout'
+```
 
 You're done! Enjoy watching your sessions automatically timeout.
 
@@ -80,21 +112,23 @@ active sessions. If you prefer that it check more frequently, pass a
 frequency attribute to the helper method. The frequency is given in
 seconds. The following example checks the server every 15 seconds:
 
-    <html>
-      <head>...</head>
-      <body>
-        <% if current_user %>
-          <%= auto_session_timeout_js frequency: 15 %>
-        <% end %>
-        ...
-      </body>
-    </html>
+```erb
+<html>
+  <head>...</head>
+  <body>
+    <% if current_user %>
+      <%= auto_session_timeout_js frequency: 15 %>
+    <% end %>
+    ...
+  </body>
+</html>
+```
 
 ## TODO
 
 * current_user must be defined
 * using Prototype vs. jQuery
-* setting timeout in controller vs. user
+* using with Devise
 
 ## Contributing
 

data/auto-session-timeout.gemspec

@@ -8,7 +8,7 @@ Gem::Specification.new do |spec|
   spec.version       = Auto::Session::Timeout::VERSION
   spec.authors       = ["Matthew Bass"]
   spec.email         = ["pelargir@gmail.com"]
-  spec.description   = %q{Provides automatic session timeout in a Rails application.}
+  spec.description   = %q{Automatic session timeout in Rails}
   spec.summary       = %q{Provides automatic session timeout in a Rails application.}
   spec.homepage      = "http://github.com/pelargir/auto-session-timeout"
   spec.license       = "MIT"
@@ -18,8 +18,8 @@ Gem::Specification.new do |spec|
   spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
   spec.require_paths = ["lib"]
 
-  spec.add_development_dependency "bundler", "~> 1.3"
-  spec.add_development_dependency "rake"
-  spec.add_development_dependency "minitest", "~> 4.2"
-  spec.add_development_dependency "actionpack", "~> 3.2"
+  spec.add_dependency "actionpack", [">= 3.2", "< 7"]
+  spec.add_development_dependency "bundler", "~> 2.0"
+  spec.add_development_dependency "rake", "~> 13.0"
+  spec.add_development_dependency "minitest", [">= 4.2", "< 6"]
 end

data/lib/auto/session/timeout/version.rb

@@ -1,7 +1,7 @@
 module Auto
   module Session
     module Timeout
-      VERSION = "0.9.2"
+      VERSION = "0.9.7"
     end
   end
 end

data/lib/auto_session_timeout.rb

@@ -2,16 +2,16 @@ module AutoSessionTimeout
   
   def self.included(controller)
     controller.extend ClassMethods
-    controller.hide_action :render_auto_session_timeout
   end
   
   module ClassMethods
     def auto_session_timeout(seconds=nil)
-      prepend_before_filter do |c|
-        if c.session[:auto_session_expires_at] && c.session[:auto_session_expires_at] < Time.now
+      protect_from_forgery except: [:active, :timeout]
+      prepend_before_action do |c|
+        if session_expired?(c) && !signing_in?(c)
           c.send :reset_session
         else
-          unless c.url_for(c.params).start_with?(c.send(:active_url))
+          unless c.request.original_url.start_with?(c.send(:active_url))
             offset = seconds || (current_user.respond_to?(:auto_timeout) ? current_user.auto_timeout : nil)
             c.session[:auto_session_expires_at] = Time.now + offset if offset && offset > 0
           end
@@ -27,14 +27,30 @@ module AutoSessionTimeout
   
   def render_session_status
     response.headers["Etag"] = ""  # clear etags to prevent caching
-    render text: !!current_user, status: 200
+    render plain: !!current_user, status: 200
   end
   
   def render_session_timeout
-    flash[:notice] = "Your session has timed out."
-    redirect_to "/login"
+    flash[:notice] = t("devise.failure.timeout", default: "Your session has timed out.")
+    redirect_to sign_in_path
+  end
+
+  private
+
+  def signing_in?(c)
+    c.request.env["PATH_INFO"] == sign_in_path && c.request.env["REQUEST_METHOD"] == "POST"
+  end
+
+  def session_expired?(c)
+    c.session[:auto_session_expires_at].try(:<, Time.now)
+  end
+
+  def sign_in_path
+    user_session_path
+  rescue
+    "/login"
   end
   
 end
 
-ActionController::Base.send :include, AutoSessionTimeout
+ActionController::Base.send :include, AutoSessionTimeout

data/lib/auto_session_timeout_helper.rb

@@ -1,20 +1,26 @@
 module AutoSessionTimeoutHelper
   def auto_session_timeout_js(options={})
     frequency = options[:frequency] || 60
+    attributes = options[:attributes] || {}
     code = <<JS
-if (typeof(Ajax) != 'undefined') {
-  new Ajax.PeriodicalUpdater('', '/active', {frequency:#{frequency}, method:'get', onSuccess: function(e) {
-    if (e.responseText == 'false') window.location.href = '/timeout';
-  }});
-} else {
-  $.PeriodicalUpdater('/active', {minTimeout:#{frequency * 1000}, multiplier:0, method:'get', verbose:2}, function(remoteData, success) {
-    if (success == 'success' && remoteData == 'false')
-      window.location.href = '/timeout';
-  });
+function PeriodicalQuery() {
+  var request = new XMLHttpRequest();
+  request.onload = function (event) {
+    var status = event.target.status;
+    var response = event.target.response;
+    if (status === 200 && (response === false || response === 'false' || response === null)) {
+      window.location.href = '#{timeout_path}';
+    }
+  };
+  request.open('GET', '#{active_path}', true);
+  request.responseType = 'json';
+  request.send();
+  setTimeout(PeriodicalQuery, (#{frequency} * 1000));
 }
+setTimeout(PeriodicalQuery, (#{frequency} * 1000));
 JS
-    javascript_tag(code)
+    javascript_tag(code, attributes)
   end
 end
 
-ActionView::Base.send :include, AutoSessionTimeoutHelper
+ActionView::Base.send :include, AutoSessionTimeoutHelper

data/test/auto_session_timeout_helper_test.rb

@@ -2,33 +2,36 @@ require File.dirname(__FILE__) + '/test_helper'
 
 describe AutoSessionTimeoutHelper do
 
-  subject { Class.new(ActionView::Base).new }
+  class ActionView::Base
+    def timeout_path
+      '/timeout'
+    end
+    
+    def active_path
+      '/active'
+    end
+  end
+
+  subject { ActionView::Base.new }
 
   describe "#auto_session_timeout_js" do
     it "returns correct JS" do
-      assert_equal "<script type=\"text/javascript\">
-//<![CDATA[
-if (typeof(Ajax) != 'undefined') {
-  new Ajax.PeriodicalUpdater('', '/active', {frequency:60, method:'get', onSuccess: function(e) {
-    if (e.responseText == 'false') window.location.href = '/timeout';
-  }});
-} else {
-  $.PeriodicalUpdater('/active', {minTimeout:60000, multiplier:0, method:'get', verbose:2}, function(remoteData, success) {
-    if (success == 'success' && remoteData == 'false')
-      window.location.href = '/timeout';
-  });
-}
-
-//]]>
-</script>", subject.auto_session_timeout_js
+      js = subject.auto_session_timeout_js
+      assert js.include?("window.location.href = '/timeout'")
+      assert js.include?("request.open('GET', '/active', true)")
+      assert js.include?("setTimeout(PeriodicalQuery, (60 * 1000))")
     end
 
     it "uses custom frequency when given" do
-      assert_match /frequency:120/, subject.auto_session_timeout_js(frequency: 120)
+      assert_match %r{120}, subject.auto_session_timeout_js(frequency: 120)
     end
 
     it "uses 60 when custom frequency is nil" do
-      assert_match /frequency:60/, subject.auto_session_timeout_js(frequency: nil)
+      assert_match %r{60}, subject.auto_session_timeout_js(frequency: nil)
+    end
+
+    it "accepts attributes" do
+      assert_match %r{data-turbolinks-eval="false"}, subject.auto_session_timeout_js(attributes: { 'data-turbolinks-eval': 'false' })
     end
   end
 

metadata

@@ -1,79 +1,92 @@
 --- !ruby/object:Gem::Specification
 name: auto-session-timeout
 version: !ruby/object:Gem::Version
-  version: 0.9.2
+  version: 0.9.7
 platform: ruby
 authors:
 - Matthew Bass
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2013-07-24 00:00:00.000000000 Z
+date: 2021-02-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: bundler
+  name: actionpack
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '1.3'
-  type: :development
+        version: '3.2'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '7'
+  type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '3.2'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '7'
 - !ruby/object:Gem::Dependency
-  name: rake
+  name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '2.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: '2.0'
 - !ruby/object:Gem::Dependency
-  name: minitest
+  name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '4.2'
+        version: '13.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '4.2'
+        version: '13.0'
 - !ruby/object:Gem::Dependency
-  name: actionpack
+  name: minitest
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '3.2'
+        version: '4.2'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '6'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '3.2'
-description: Provides automatic session timeout in a Rails application.
+        version: '4.2'
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '6'
+description: Automatic session timeout in Rails
 email:
 - pelargir@gmail.com
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- .gitignore
+- ".gitignore"
+- ".travis.yml"
 - CHANGELOG
 - Gemfile
 - LICENSE.txt
@@ -92,24 +105,23 @@ homepage: http://github.com/pelargir/auto-session-timeout
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ! '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ! '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.0.3
-signing_key: 
+rubygems_version: 3.1.4
+signing_key:
 specification_version: 4
 summary: Provides automatic session timeout in a Rails application.
 test_files: