dispatch-rails 0.9.0 → 0.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 797a73d62a39b0ab3640364d8ef71186b61f3233da2788f7733b72c85e77cc75
-  data.tar.gz: 235fa20b827e25a6f0537e20d3cdd51221c0bebbed18013046901c9bdabf51ed
+  metadata.gz: 0fab7390093499294d3150088b49f04fc9fca920a711b33d1e8455e3a6ad2ea9
+  data.tar.gz: ba51af0c31c876c4d482445cb33353d56f97c5afb2a2dfc07d4a29e06a15d69d
 SHA512:
-  metadata.gz: f3cbf75d09473580ec5f66ffaaf7d7623631c1a453bbe9b67b86e091e4fbcb56cd7da1ea141080b6375b714802915c00c4fd9f64d7c649bb2de7e6d6b46d1c0b
-  data.tar.gz: f24f36ca5d2769053faa65cb5b77da6e09a28aea5b4e3166bcbb64e2473729cd9b54df4d6936572fe3ecb41937cb5e43e32f0b9de24f2c27b1879532da0232de
+  metadata.gz: dce4062b5290d5a1e82f3c7bdf01d73a279ac4fa01a63431ed2ed3f97e58f2592229fd02d09db26cf811c1a774e2edcadb5ea82d1bb1654b75918d886685c70c
+  data.tar.gz: b7d09382ab99f1962a6ea92007364f5798d7cda3c33f1bd92cc111c6895de49554d655ca9d8b87a2d1978d0812cbf5e29cdc66e4821a766db8e3c8e71e29b11c

data/CHANGELOG.md

@@ -0,0 +1,41 @@
+# Changelog
+
+All notable changes to `dispatch-rails` are documented here. The format is based
+on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
+adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.10.0] - 2026-06-18
+
+### Added
+- `config.require_authenticated_user` (default `false`): when enabled,
+  `dispatch_widget_tag` renders nothing on requests where the `user` lambda
+  resolves to `nil` or a blank hash. Lets a host app keep the feedback widget
+  off public/unauthenticated pages (home page, EULA, privacy policy) so only
+  signed-in users can submit reports. Off by default to preserve existing
+  behavior — the stock `user` resolver returns `nil`, so defaulting it on would
+  hide the widget for apps that haven't wired up identity.
+
+## [0.9.0]
+
+### Added
+- Capture SolidQueue infrastructure failures (pruned/orphaned jobs, thread
+  crashes, recurring-enqueue misses) that never flow through `Rails.error` or
+  ActiveJob.
+
+## [0.8.1]
+
+### Fixed
+- `ReportingEndpointMiddleware` no longer swallows host-app errors when the
+  browser-reports path is not owned by the gem.
+
+## [0.8.0]
+
+### Added
+- Browser CSP & Reporting-API capture (`capture_csp_violations`,
+  `capture_browser_reports`).
+
+## [0.7.0]
+
+### Added
+- Process-lifecycle capture (crash-at-exit, rake failures, shutdown flush) for
+  Honeybadger parity.

data/README.md

@@ -246,6 +246,22 @@ end
 <% end %>
 ```
 
+### Hiding the widget on public pages
+
+By default the widget renders for everyone, including anonymous visitors. If you
+only want signed-in users to be able to submit reports — keeping the button off
+public surfaces like the home page, EULA, or privacy policy — opt in:
+
+```ruby
+c.require_authenticated_user = true
+```
+
+With this on, `dispatch_widget_tag` returns `nil` (renders nothing) on any
+request where your `user` lambda resolves to `nil` or a blank hash, so make sure
+that lambda is wired up to your auth. It's off by default because the stock
+`user` resolver returns `nil`, and defaulting it on would hide the widget for
+apps that haven't configured identity.
+
 ### Per-page severity / labels
 
 ```erb

data/app/helpers/dispatch/widget_helper.rb

@@ -13,6 +13,11 @@ module Dispatch
       return nil unless config.configured?
 
       user = config.user.respond_to?(:call) ? config.user.call(self) : nil
+      # Hide the widget on unauthenticated pages when the host opts in — keeps
+      # the report button off public surfaces (home page, EULA, …) where there
+      # is no signed-in user to attribute a report to.
+      return nil if config.require_authenticated_user && user.blank?
+
       base_metadata = config.metadata.respond_to?(:call) ? config.metadata.call(self) : {}
 
       page_metadata = base_metadata.to_h.merge(extra_metadata)

data/lib/dispatch/rails/configuration.rb

@@ -10,7 +10,8 @@ module Dispatch
       MODES = %i[widget errors_only].freeze
 
       # Bug-report widget
-      attr_accessor :api_key, :endpoint, :user, :metadata, :capture_console, :capture_clicks, :button_position
+      attr_accessor :api_key, :endpoint, :user, :metadata, :capture_console, :capture_clicks, :button_position,
+                    :require_authenticated_user
       # Mode + API-only context
       attr_accessor :mode, :context, :send_default_params
       # Exception tracking
@@ -38,6 +39,13 @@ module Dispatch
         @capture_console = false
         @capture_clicks = true # track the last few clicks as a "user path" for context
         @button_position = "bottom-right"
+        # Opt-in: hide the widget on requests with no resolved user (the `user`
+        # lambda returned nil/blank). Lets a host app keep the widget off
+        # public/unauthenticated pages — a home page, EULA, privacy policy —
+        # where anyone could otherwise submit a report. Off by default because
+        # the stock `user` resolver returns nil, so defaulting it on would hide
+        # the widget for every app that hasn't wired up identity.
+        @require_authenticated_user = false
 
         # Mode + API-only context
         @mode = :widget

data/lib/dispatch/rails/version.rb

@@ -1,5 +1,5 @@
 module Dispatch
   module Rails
-    VERSION = "0.9.0".freeze
+    VERSION = "0.10.0".freeze
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dispatch-rails
 version: !ruby/object:Gem::Version
-  version: 0.9.0
+  version: 0.10.0
 platform: ruby
 authors:
 - Dispatch Team
@@ -39,6 +39,7 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- CHANGELOG.md
 - README.md
 - app/assets/javascripts/dispatch/error_tracker.js
 - app/assets/javascripts/dispatch/widget.js