cloudflare-turnstile-rails 0.9.1 → 0.9.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fa68befac51923cd3175a3a806994532b758c51f37e910a6687582b758401b21
-  data.tar.gz: 91908d8bde3e077cacbe9369cab913d34233baa41ee3ba84d1ad134df099aea9
+  metadata.gz: b26a1fe41faf2fc522f8c3edfa99d1630302e42f6b27c70d57ef2bd18d68141b
+  data.tar.gz: a4cd3a79a966b15dd86abb2bb432ec514b799a7cb18c259fe663d7a0b446e68c
 SHA512:
-  metadata.gz: fa5a8eaafdd4072ceb5e60739d51db17364073c6b25edaccba093c457194687b7c012f6bf5e5b80be7444a593467a05f6fd090ede343cb5a1920abc17871620a
-  data.tar.gz: 8ab2b74ec0f43f2c59b477b451fdcfc4544d17f30c386528b4700e34578fe29c505fcb4b0427af0e765ed2609bd7f30ec0dbd1e00f15d516bdd7825de18e59db
+  metadata.gz: 44f4c61f9ee07d73c42537269b82467cd6feea576249d3c726a85cf77a779a0243868947af930baddd4458d0310330c62843eff956602156193fdfedd44df7ed
+  data.tar.gz: 491185d8692844b7fca37e5881054b6f25ac20e58f369ecda969a260d1f66f520a6ff297d4b86c444d483cc25e63cf496c76b6c6cba192c19a077a815d201802

data/README.md

@@ -5,7 +5,7 @@
 [![Lint Status](https://github.com/vkononov/cloudflare-turnstile-rails/actions/workflows/lint.yml/badge.svg)](https://github.com/vkononov/cloudflare-turnstile-rails/actions/workflows/lint.yml)
 [![Test Status](https://github.com/vkononov/cloudflare-turnstile-rails/actions/workflows/test.yml/badge.svg)](https://github.com/vkononov/cloudflare-turnstile-rails/actions/workflows/test.yml)
 
-A lightweight Rails gem for effortless Cloudflare Turnstile integration with Turbo support and CSP compliance.
+Cloudflare Turnstile gem for Ruby on Rails with built-in Turbo and Turbolinks support and CSP compliance.
 
 Supports `Rails >= 5.0` with `Ruby >= 2.6.0`.
 

data/lib/cloudflare/turnstile/rails/verification.rb

@@ -1,4 +1,5 @@
 require 'net/http'
+require 'openssl'
 
 require_relative 'constants/cloudflare'
 
@@ -64,7 +65,22 @@ module Cloudflare
           request = Net::HTTP::Post.new(uri.request_uri, 'Content-Type': 'application/x-www-form-urlencoded')
           request.set_form_data(body)
 
-          res = Net::HTTP.start(uri.host, uri.port, use_ssl: true) { |http| http.request(request) }
+          http = Net::HTTP.new(uri.host, uri.port)
+          http.use_ssl = true
+          http.verify_mode = OpenSSL::SSL::VERIFY_PEER
+          http.cert_store = OpenSSL::X509::Store.new
+          http.cert_store.set_default_paths
+
+          begin
+            res = http.request(request)
+          rescue Net::OpenTimeout, Net::ReadTimeout => e
+            raise ConfigurationError, "Turnstile verification timed out: #{e.message}"
+          rescue OpenSSL::SSL::SSLError => e
+            raise ConfigurationError, "SSL verification failed: #{e.message}"
+          rescue SocketError, Errno::ECONNREFUSED => e
+            raise ConfigurationError, "Network error during Turnstile verification: #{e.message}"
+          end
+
           begin
             json = JSON.parse(res.body)
           rescue JSON::ParserError

data/lib/cloudflare/turnstile/rails/version.rb

@@ -1,7 +1,7 @@
 module Cloudflare
   module Turnstile
     module Rails
-      VERSION = '0.9.1'.freeze
+      VERSION = '0.9.2'.freeze
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: cloudflare-turnstile-rails
 version: !ruby/object:Gem::Version
-  version: 0.9.1
+  version: 0.9.2
 platform: ruby
 authors:
 - Vadim Kononov
@@ -23,8 +23,8 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '5.0'
-description: Integrates Cloudflare Turnstile into Rails applications, handling script
-  injection, CSP-nonce support, and automatic Turbo/Turbolinks reinitialization.
+description: Integrates Cloudflare Turnstile into Ruby on Rails applications, transparently
+  reloads on Turbo and Turbolinks events, and embeds CSP-nonce-compliant scripts.
 email:
 - vadim@konoson.com
 executables: []
@@ -72,7 +72,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.7
+rubygems_version: 3.7.2
 specification_version: 4
-summary: Simple Cloudflare Turnstile integration for Ruby on Rails.
+summary: Cloudflare Turnstile gem for Rails with built-in Turbo and Turbolinks support
+  and CSP compliance
 test_files: []