doesfacebook 0.5.4 → 0.5.5

data/README.rdoc

@@ -75,6 +75,14 @@ This allows your application to verify and properly handle requests from Faceboo
 additional data and parameters your app is sent by Facebook, such as the current user ID, active
 Facebook page, and more.
 
+By default, to enhance your iframe development, the "signed_request" parameter from Facebook will be
+stuffed into the session and subsequent requests that lack a "signed_request" parameter (links from
+your internal iframe clicks, perhaps), will used this signed_request. This allows you to build a canvas
+or page tab application like any other web application and not worry about passing around the signed_request
+parameter yourself.
+
+  does_facebook :session=>false     # <== Use this invocation to prevent session stuffing
+
 Within your controllers which declare _does_facebook_ (or inherit from a controller which does), you
 will now have access to the following niceties:
 

data/lib/doesfacebook.rb

@@ -40,13 +40,13 @@ module ActionController
     
     # Call this method within your controller to parse configuration and enabled
     # session validation and parsing
-    def self.does_facebook
+    def self.does_facebook(opts={})
       self.instance_eval do 
         include DoesFacebook::Config
         include DoesFacebook::Controls
         include DoesFacebook::Filters
-        prepend_before_filter :parse_signed_request
-        prepend_before_filter :validate_signed_request
+        prepend_before_filter :parse_signed_request, :validate_signed_request
+        prepend_before_filter :sessionify_signed_request unless opts[:session]==false
         helper :does_facebook
       
         protected

data/lib/doesfacebook/filters.rb

@@ -8,6 +8,19 @@ module DoesFacebook
     
     protected
     
+    # Captures a signed_request parameter and manipulates the session to allow for
+    # a signed_request to be passed from iframe request to iframe request
+    def sessionify_signed_request
+      if request_parameter = request.params["signed_request"]
+        session[:signed_request] = request_parameter
+        logger.info "  Facebook Signed Request received. Stored/updated in session."
+      else
+        params["signed_request"] = session[:signed_request]
+        logger.info "  No Facebook Signed Request received. Loaded, if present, from session."
+      end
+    end
+    
+    
     # Ensures, using configuration options, that the request was signed by Facebook
     def validate_signed_request
       if request_parameter = request.params["signed_request"]

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: doesfacebook
 version: !ruby/object:Gem::Version
-  version: 0.5.4
+  version: 0.5.5
   prerelease: 
 platform: ruby
 authors:
@@ -9,11 +9,11 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2012-04-30 00:00:00.000000000Z
+date: 2012-05-18 00:00:00.000000000Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
-  requirement: &2157105860 !ruby/object:Gem::Requirement
+  requirement: &2152342760 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ~>
@@ -21,10 +21,10 @@ dependencies:
         version: 1.0.0
   type: :development
   prerelease: false
-  version_requirements: *2157105860
+  version_requirements: *2152342760
 - !ruby/object:Gem::Dependency
   name: jeweler
-  requirement: &2157105060 !ruby/object:Gem::Requirement
+  requirement: &2152340860 !ruby/object:Gem::Requirement
     none: false
     requirements:
     - - ~>
@@ -32,7 +32,7 @@ dependencies:
         version: 1.5.1
   type: :development
   prerelease: false
-  version_requirements: *2157105060
+  version_requirements: *2152340860
 description: Paper-thin Facebook validation and signed request parsing Rails plugin
 email: info@awexomelabs.com
 executables: []