biscuit-rails 0.2.1 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1eacb49f37fb2acc7796bd6574367af55d9428d4b3d83c69420a12f6c2856359
-  data.tar.gz: 22d3e98312498def4e3c0420448b1698a0fa123891dfe5e32237e90494760115
+  metadata.gz: 6af5d93f2b84a14db762315e56fc1e75b1ecd88b0d7763480c81364fcab20046
+  data.tar.gz: 13c0ca1019abd874c65ec3a5acd5552af3a2bc84acba6a3c2b2fc7d3c40abb51
 SHA512:
-  metadata.gz: 88015405e5c6ef0cc3cdbd927008e59fa0717660c645aca958ce88bb7ebef09dc994f23a316c0b68eb129765b72847bb52cd7fef7c8e96f1b8d4e12658faea50
-  data.tar.gz: 57993714ad02872a2e6b84b489db819a52ce6f9c6fb427fd9a08434ac2e9494e400810ba48e416e908a5640859b193f361d8a17a3476be4fff6d0e6584eef9c5
+  metadata.gz: 51ac7899d57bb410cfa26695a7c583490afdf7dc27310086cbce2489678475af409b6391b189570baf2f1836fb07215f20308d04fbb1d6794151affbf7bc1774
+  data.tar.gz: 278a5ba3887c2aa9a2d7172b506fdb2c02837ba31827db44a9f58e259a337ebf05334d69f086e99fac6b2d39a22d55ab3a63d1eee29e0e9f095e40c0373ebe2b

data/CHANGELOG.md

@@ -5,6 +5,27 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.0] - 2026-06-21
+
+### Added
+
+- `biscuit:consent-given` DOM event — dispatched on the banner element (bubbles)
+  after every successful consent POST, with `detail.categories` mirroring the
+  saved payload. Lets apps run tracking code (GA4 Consent Mode v2, GTM dataLayer,
+  Meta Pixel, etc.) immediately after consent without any page reload.
+
+### Removed
+
+- `reload_on_consent` option for `biscuit_banner` — removed as the
+  `biscuit:consent-given` event supersedes it. Apps that need a page reload
+  after consent can do `document.addEventListener("biscuit:consent-given",
+  () => window.location.reload())`.
+
+**Migration:** remove `reload_on_consent: true` from any `biscuit_banner`
+calls. Add the one-liner above if a reload is still needed for your use case.
+
+---
+
 ## [0.2.1] - 2026-04-02
 
 ### Fixed

data/README.md

@@ -5,6 +5,8 @@ bottom/top banner, manages consent state via a browser cookie, and exposes a
 Stimulus controller for interactivity. Supports i18n and CSS custom property
 theming with no external runtime dependencies.
 
+[Project page](https://bemused.org/projects/biscuit-rails/) · [GitHub](https://github.com/garethfr/biscuit-rails) · [Changelog](https://github.com/garethfr/biscuit-rails/blob/main/CHANGELOG.md) · [Issues](https://github.com/garethfr/biscuit-rails/issues)
+
 ---
 
 ## Requirements
@@ -115,20 +117,45 @@ revisit their preferences at any time.
 
 ## Banner Options
 
-`biscuit_banner` accepts keyword options to control behaviour per-page:
+`biscuit_banner` accepts keyword options to control behaviour per-page.
 
-### `reload_on_consent`
+Currently there are no banner-level options. Configuration is done via the
+initializer — see **Configuration** below.
 
-When `true`, the page reloads via `Turbo.visit` after the user saves their
-consent choice, instead of just hiding the banner. This is useful when your
-layout conditionally loads scripts based on consent — a reload ensures those
-scripts are evaluated with the new cookie in place.
+---
 
-```erb
-<%= biscuit_banner(reload_on_consent: true) %>
+## `biscuit:consent-given` event
+
+After any consent POST succeeds, the controller dispatches a
+`biscuit:consent-given` DOM event on the banner's root element. The event
+bubbles, so you can listen anywhere:
+
+```js
+document.addEventListener("biscuit:consent-given", ({ detail }) => {
+  if (detail.categories.analytics) {
+    // GA4 Consent Mode v2 — no page reload needed
+    gtag("consent", "update", { analytics_storage: "granted" })
+    gtag("event", "page_view")
+  }
+  if (detail.categories.marketing) {
+    fbq("consent", "grant")
+    fbq("track", "PageView")
+  }
+})
 ```
 
-Default: `false` — the banner hides in place without a page reload.
+`detail.categories` mirrors the payload sent to the server —
+`{ analytics: true, marketing: false, ... }`.
+
+If you need a full page reload after consent (for example, to trigger
+server-side `biscuit_allowed?()` guards on the current page), do it in the
+handler:
+
+```js
+document.addEventListener("biscuit:consent-given", () => {
+  window.location.reload()
+})
+```
 
 ---
 
@@ -364,10 +391,8 @@ Biscuit provides the consent UI and storage mechanism. You are responsible for:
 ```
 
 For scripts that must load on the client side after a user accepts consent
-during their current session (without a page reload), listen for the Fetch
-response in your own JavaScript and initialise scripts there, or use a
-lightweight Turbo visit to reload the page after the consent POST succeeds.
-(Turbo Stream support for post-consent injection is planned for v2.)
+during their current session (without a page reload), listen for the
+`biscuit:consent-given` DOM event and initialise scripts there.
 
 ### GDPR compliance checklist
 

data/app/assets/javascripts/biscuit/biscuit_controller.js

@@ -6,8 +6,7 @@ export default class extends Controller {
     endpoint:         String,
     csrfToken:        String,
     position:         { type: String, default: "bottom" },
-    alreadyConsented: { type: Boolean, default: false },
-    reloadOnConsent:  { type: Boolean, default: false }
+    alreadyConsented: { type: Boolean, default: false }
   }
 
   connect() {
@@ -70,12 +69,12 @@ export default class extends Controller {
         body: JSON.stringify({ categories })
       })
       if (response.ok) {
-        if (this.reloadOnConsentValue) {
-          Turbo.visit(window.location.href)
-        } else {
-          this.#hideBanner()
-          this.#showManageLink()
-        }
+        this.element.dispatchEvent(new CustomEvent("biscuit:consent-given", {
+          bubbles: true,
+          detail: { categories }
+        }))
+        this.#hideBanner()
+        this.#showManageLink()
       }
     } catch (error) {
       console.error("[Biscuit] Failed to save consent:", error)

data/app/views/biscuit/banner/_banner.html.erb

@@ -2,8 +2,7 @@
      data-biscuit-position-value="<%= Biscuit.configuration.position %>"
      data-biscuit-csrf-token-value="<%= form_authenticity_token %>"
      data-biscuit-endpoint-value="<%= biscuit.consent_path %>"
-     data-biscuit-already-consented-value="<%= consent.given? %>"
-     data-biscuit-reload-on-consent-value="<%= options[:reload_on_consent] ? 'true' : 'false' %>">
+     data-biscuit-already-consented-value="<%= consent.given? %>">
 
 <div class="biscuit-banner"
      data-biscuit-target="banner"

data/lib/biscuit/version.rb

@@ -1,3 +1,3 @@
 module Biscuit
-  VERSION = "0.2.1"
+  VERSION = "0.3.0"
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: biscuit-rails
 version: !ruby/object:Gem::Version
-  version: 0.2.1
+  version: 0.3.0
 platform: ruby
 authors:
 - Gareth James
 bindir: bin
 cert_chain: []
-date: 2026-04-02 00:00:00.000000000 Z
+date: 2026-06-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails