aws-sessionstore-dynamodb 3.0.1 → 3.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c47a85cf680544f7ae67c8001202f12183ef7c820ae2a08807ae577b43ab610a
-  data.tar.gz: fe33ca1aaf6a21a3e12064290c329184ed071bde6765103c656ecbb200334d37
+  metadata.gz: 35f83cb5e399ca623bfbd56cfccc2e3682da31acce2008bb7e93f5e5a5db7afa
+  data.tar.gz: 409c03019e94db3d83c7db166b26645bb07ab1a4ff24fcb2a328e4f8987df0a9
 SHA512:
-  metadata.gz: 525409e21cd2766373652e93bd7f5284b6e8f277a6715b06f126dcfa3286cb26882665786e4cb8c9d06c4b5bf202334b6dde66e25ddf6ba79dc1afc0ac19c165
-  data.tar.gz: 2842691bc6bda28038e4bf93fb63672b06aba06bcbc09b7a82d1a851ab58388bd13f33b62bef804963fba73b57a0169257a875be1e57ee3fbde125084bdc8c8e
+  metadata.gz: ca6653d948cf8e8c8858ac200d92edc01d8b9036512bc7df51523d4ecc12d48527958b117993cdc284fe6235c71bd2aab5cfcf83594c66393f75a7046c3ab47d
+  data.tar.gz: 6e7f1d6aeb2878e46d567a5962c1011933845b9cdb11af9585e8a5d70dda2f564134c8b1670876a4363b60668882fa60dffbbd98c10c6f8370277b54a293d3f2

data/CHANGELOG.md

@@ -1,3 +1,8 @@
+3.1.0 (2026-06-29)
+------------------
+
+* Feature - Add `:serializer` configuration option (`:marshal`, `:json`, `:json_allow_marshal`). Default remains `:marshal` for backwards compatibility. Set to `:json` or `:json_allow_marshal` to use JSON serialization for session data.
+
 3.0.1 (2024-11-16)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-3.0.1
+3.1.0

data/lib/aws/session_store/dynamo_db/configuration.rb

@@ -58,6 +58,7 @@ module Aws::SessionStore::DynamoDB
       lock_expiry_time: 500,
       lock_retry_delay: 500,
       lock_max_wait_time: 1,
+      serializer: :marshal,
       config_file: nil,
       dynamo_db_client: nil
     }.freeze
@@ -94,6 +95,18 @@ module Aws::SessionStore::DynamoDB
     #   to obtain lock once an attempt to obtain the lock has been made and has failed.
     # @option options [Integer] :lock_max_wait_time (500) Maximum time in seconds to wait to acquire the
     #   lock before giving up.
+    # @option options [Symbol] :serializer (:marshal) The serializer for session data.
+    #   - `:json` - Serialize and deserialize with JSON only. Raises an error if legacy
+    #     Marshal-encoded data is encountered.
+    #   - `:json_allow_marshal` - Serialize with JSON, but fall back to deserializing with
+    #     Marshal if JSON parsing fails. Use this during migration from Marshal to JSON.
+    #   - `:marshal` - Serialize and deserialize with Marshal only (legacy behavior, not
+    #     recommended).
+    #
+    #   Note: When using `:json` or `:json_allow_marshal`, session data must consist of
+    #   JSON-compatible types only (strings, numbers, booleans, arrays, hashes with string
+    #   keys). Symbol keys are converted to strings, and complex objects (e.g., Time, custom
+    #   classes) are not preserved across serialization.
     # @option options [String, Pathname] :config_file
     #   Path to a YAML file that contains configuration options.
     # @option options [Aws::DynamoDB::Client] :dynamo_db_client (Aws::DynamoDB::Client.new)

data/lib/aws/session_store/dynamo_db/errors/default_handler.rb

@@ -20,12 +20,14 @@ module Aws::SessionStore::DynamoDB::Errors
 
     # Raises {HARD_ERRORS} up the Rack stack.
     # Places all other errors in Racks error stream.
+    # rubocop:disable Naming/PredicateMethod
     def handle_error(error, env = {})
       raise error if HARD_ERRORS.include?(error.class) || @raise_errors
 
       store_error(error, env)
       false
     end
+    # rubocop:enable Naming/PredicateMethod
 
     # Sends error to error stream
     def store_error(error, env = {})

data/lib/aws/session_store/dynamo_db/garbage_collection.rb

@@ -93,7 +93,7 @@ module Aws::SessionStore::DynamoDB
       # Provides specified date attributes.
       def oldest_date(sec)
         {
-          attribute_value_list: [n: (Time.now - sec).to_f.to_s],
+          attribute_value_list: [{ n: (Time.now - sec).to_f.to_s }],
           comparison_operator: 'LT'
         }
       end

data/lib/aws/session_store/dynamo_db/locking/base.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require 'json'
+
 module Aws::SessionStore::DynamoDB::Locking
   # Handles session management.
   class Base
@@ -71,13 +73,29 @@ module Aws::SessionStore::DynamoDB::Locking
       merge_all(table_opts(sid), attribute_opts)
     end
 
-    # Marshal the data.
     def pack_data(data)
-      [Marshal.dump(data)].pack('m*')
+      case @config.serializer
+      when :marshal
+        [Marshal.dump(data)].pack('m*')
+      else
+        JSON.dump(data)
+      end
     end
 
-    # Unmarshal the data.
     def unpack_data(packed_data)
+      case @config.serializer
+      when :marshal
+        Marshal.load(packed_data.unpack1('m*'))
+      when :json
+        JSON.parse(packed_data)
+      when :json_allow_marshal
+        handle_unpack_data_fallback(packed_data)
+      end
+    end
+
+    def handle_unpack_data_fallback(packed_data)
+      JSON.parse(packed_data)
+    rescue JSON::ParserError
       Marshal.load(packed_data.unpack1('m*'))
     end
 

data/lib/aws/session_store/dynamo_db/locking/pessimistic.rb

@@ -59,7 +59,7 @@ module Aws::SessionStore::DynamoDB::Locking
     # @return [Time] Time stamp for which the session was locked.
     def lock_time(sid)
       result = @config.dynamo_db_client.get_item(get_lock_time_opts(sid))
-      (result[:item]['locked_at']).to_f if result[:item]['locked_at']
+      result[:item]['locked_at']&.to_f
     end
 
     # @return [String] Session data.
@@ -138,7 +138,7 @@ module Aws::SessionStore::DynamoDB::Locking
       {
         expected: {
           'locked_at' => {
-            value: (env['locked_at']).to_s,
+            value: env['locked_at'].to_s,
             exists: true
           }
         }

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: aws-sessionstore-dynamodb
 version: !ruby/object:Gem::Version
-  version: 3.0.1
+  version: 3.1.0
 platform: ruby
 authors:
 - Amazon Web Services
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-11-16 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack
@@ -85,7 +84,6 @@ homepage: https://github.com/aws/aws-sessionstore-dynamodb-ruby
 licenses:
 - Apache-2.0
 metadata: {}
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -100,8 +98,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.11
-signing_key:
+rubygems_version: 4.0.3
 specification_version: 4
 summary: Amazon DynamoDB Session Store for Rack web applications.
 test_files: []