flash_cookie_session 1.1.0 → 1.1.1

data/Readme.rdoc

@@ -76,6 +76,27 @@ I'm not sure who first figured everything out, so I won't bother trying to credi
 
 With SWFUpload, the post_params are sent along with the file upload, which would be in params[:Filedata] in this example.
 
+Let's break this down a little so you understand it better:
+
+    post_params : {
+      "<%= key = Rails.application.config.session_options[:key] %>" : "<%= cookies[key] %>",
+      "<%= request_forgery_protection_token %>" : "<%= form_authenticity_token %>",
+    },
+    
+The first key is your cookie session key which is passed along with every request when the user changes pages. If the server does not know about this session key then it cannot authenticate the user properly and therefore thinks you are not logged in. Since Flash has it's own set of cookies separate from the browser and effectively acts as it's own web browser when making requests to your app, we need to explicitly pass along the web browsersession key along with the Flash request so that the Rails server has all the info it needs to authenticate the user.
+
+The second key is the standard authentication token that is passed along to prevent cross-site request forgeries.  
+
+=== Optional Parameters
+
+- If you are using a "remember" cookie to keep a user logged in any time they come back to your website, you can pass this in through the params.  If this does not get passed in, the server will not be able to authenticate the user properly and you will be scratching your head again wondering what went wrong:
+    
+    "remember_token" : "<%= cookies[:remember_token] %>"
+    
+The key has to be named `remember_token` but your cookie may be named something other than `:remember_token` so change that accordingly based on your implementation.
+    
+- If you are getting a "406 Not Acceptable" error on trying to upload, you might need to setup an extra set of params. Try adding '+_http_accept+': '+text+/+html+' (or any other appropriate media type that your respond_to block in your controller action needs - 'text/javascript' for format.js, etc) to post_params above.
+
 === Additional info
 
 This is frustrating and annoying stuff, and I'm sorry that we have to deal with it. If you have an idea about how to improve the situation or example for additional Flash uploaders, pull requests that expand on the README and/or Rails 3 gem are more than welcome.

data/lib/flash_cookie_session/middleware.rb

@@ -1,6 +1,6 @@
 module FlashCookieSession
   class Middleware
-    def initialize(app, session_key = '_session_id')
+    def initialize(app, session_key = Rails.application.config.session_options[:key])
       @app = app
       @session_key = session_key
     end
@@ -8,10 +8,13 @@ module FlashCookieSession
     def call(env)
       if env['HTTP_USER_AGENT'] =~ /^(Adobe|Shockwave) Flash/
         req = Rack::Request.new(env)
-        env['HTTP_COOKIE'] = [ @session_key, req.params[@session_key] ].join('=').freeze if req.params[@session_key]
+        the_session_key = [ @session_key, req.params[@session_key] ].join('=').freeze if req.params[@session_key]
+        the_remember_token = [ 'remember_token', req.params['remember_token'] ].join('=').freeze if req.params['remember_token']
+        cookie_with_remember_token_and_session_key = [ the_remember_token, the_session_key ].join(';').freeze
+        env['HTTP_COOKIE'] = cookie_with_remember_token_and_session_key
         env['HTTP_ACCEPT'] = "#{req.params['_http_accept']}".freeze if req.params['_http_accept']
       end
-
+      
       @app.call(env)
     end
   end

data/lib/flash_cookie_session/version.rb

@@ -1,3 +1,3 @@
 module FlashCookieSession
-  VERSION = "1.1.0"
+  VERSION = "1.1.1"
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification 
 name: flash_cookie_session
 version: !ruby/object:Gem::Version 
-  hash: 19
-  prerelease: false
+  hash: 17
+  prerelease: 
   segments: 
   - 1
   - 1
-  - 0
-  version: 1.1.0
+  - 1
+  version: 1.1.1
 platform: ruby
 authors: 
 - Trevor Turk
@@ -15,7 +15,7 @@ autorequire:
 bindir: bin
 cert_chain: []
 
-date: 2010-12-01 00:00:00 +00:00
+date: 2011-05-25 00:00:00 -05:00
 default_executable: 
 dependencies: 
 - !ruby/object:Gem::Dependency 
@@ -82,7 +82,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
 requirements: []
 
 rubyforge_project: flash_cookie_session
-rubygems_version: 1.3.7
+rubygems_version: 1.4.2
 signing_key: 
 specification_version: 3
 summary: Rails 3 cookie sessions can cooperate with Flash