flipper-ui 0.20.0 → 0.25.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bfa566d9ce94dadf56643f0f8effcd75795dc478e8098a91374fa20b612d772c
-  data.tar.gz: 0423fa89225c97f21cfe5bc851b43c8d13dbe930764989a8255cd61ab23bdada
+  metadata.gz: ca054fcd02084bba5c6217471a0c2113b8325b5e3e7763b5eab3723156b245d7
+  data.tar.gz: 156f7fec4900a85a7473e225d4e688be1621e59ac854f4d68a033fc85ae953bb
 SHA512:
-  metadata.gz: b65bcd93a19db4a5807f6ef4900d99ec9e8bf3232e569d0e5c27d4ad54b294657055448d5b45ee68bc66b9bf03a5810c090b210adf1de7501ea3bd61cdbd4c39
-  data.tar.gz: 52c3fbade80bc667eed46f94059d65f84c1e46330a456dda768c6cbc5e807b0681bb5d8952e88fde8b4dae992009ac559c5073073987bfdc581b55ca75482790
+  metadata.gz: 6f2fa40777f1d9dbe2aa9e73a28f212f37d7dfd511a0409c928960ee815df6731d5afb990b3645c33faf55245238b70ccc34a56d07b0625228a30f170fd87487
+  data.tar.gz: 6f36a16dbbb178f78a193d25cdae9dc523b2ae8d069cce1e12e73432ab3ac749b9089e16b075cb44f16b4ed13e78c003be8825eeb4ae4384d73066acf0876bbe

data/examples/ui/authorization.ru

@@ -0,0 +1,46 @@
+#
+# Usage:
+#   bundle exec rackup examples/ui/authorization.ru -p 9999
+#   bundle exec shotgun examples/ui/authorization.ru -p 9999
+#   http://localhost:9999/
+#
+require 'bundler/setup'
+require "flipper/ui"
+require "flipper/adapters/pstore"
+
+Flipper.register(:admins) { |actor|
+  actor.respond_to?(:admin?) && actor.admin?
+}
+
+# Example middleware to allow reading the Flipper UI but nothing else.
+class FlipperReadOnlyMiddleware
+  def initialize(app)
+    @app = app
+  end
+
+  def call(env)
+    request = Rack::Request.new(env)
+
+    if request.get?
+      @app.call(env)
+    else
+      [401, {}, ["You can only look"]]
+    end
+  end
+end
+
+# You can uncomment these to get some default data:
+# Flipper.enable(:search_performance_another_long_thing)
+# Flipper.disable(:gauges_tracking)
+# Flipper.disable(:unused)
+# Flipper.enable_actor(:suits, Flipper::Actor.new('1'))
+# Flipper.enable_actor(:suits, Flipper::Actor.new('6'))
+# Flipper.enable_group(:secrets, :admins)
+# Flipper.enable_percentage_of_time(:logging, 5)
+# Flipper.enable_percentage_of_actors(:new_cache, 15)
+# Flipper.add("a/b")
+
+run Flipper::UI.app { |builder|
+  builder.use Rack::Session::Cookie, secret: "_super_secret"
+  builder.use FlipperReadOnlyMiddleware
+}

data/examples/ui/basic.ru

@@ -1,20 +1,16 @@
 #
 # Usage:
-#   bundle exec rackup examples/ui/basic.ru -p 9999
-#   bundle exec shotgun examples/ui/basic.ru -p 9999
+#   # if you want it to not reload and be really fast
+#   bin/rackup examples/ui/basic.ru -p 9999
+#
+#   # if you want reloading
+#   bin/shotgun examples/ui/basic.ru -p 9999
+#
 #   http://localhost:9999/
 #
-require "pp"
-require "logger"
-require "pathname"
-
-root_path = Pathname(__FILE__).dirname.join("..").expand_path
-lib_path  = root_path.join("lib")
-$:.unshift(lib_path)
-
-require "flipper-ui"
+require 'bundler/setup'
+require "flipper/ui"
 require "flipper/adapters/pstore"
-require "active_support/notifications"
 
 Flipper.register(:admins) { |actor|
   actor.respond_to?(:admin?) && actor.admin?
@@ -24,21 +20,12 @@ Flipper.register(:early_access) { |actor|
   actor.respond_to?(:early?) && actor.early?
 }
 
-# Setup logging of flipper calls.
-if ENV["LOG"] == "1"
-  $logger = Logger.new(STDOUT)
-  require "flipper/instrumentation/log_subscriber"
-  Flipper::Instrumentation::LogSubscriber.logger = $logger
-end
-
-adapter = Flipper::Adapters::PStore.new
-flipper = Flipper.new(adapter, instrumenter: ActiveSupport::Notifications)
-
 Flipper::UI.configure do |config|
   # config.banner_text = 'Production Environment'
   # config.banner_class = 'danger'
   config.feature_creation_enabled = true
   config.feature_removal_enabled = true
+  config.cloud_recommendation = true
   # config.show_feature_description_in_list = true
   config.descriptions_source = lambda do |_keys|
     {
@@ -55,17 +42,17 @@ Flipper::UI.configure do |config|
 end
 
 # You can uncomment these to get some default data:
-# flipper[:search_performance_another_long_thing].enable
-# flipper[:gauges_tracking].enable
-# flipper[:unused].disable
-# flipper[:suits].enable_actor Flipper::Actor.new('1')
-# flipper[:suits].enable_actor Flipper::Actor.new('6')
-# flipper[:secrets].enable_group :admins
-# flipper[:secrets].enable_group :early_access
-# flipper[:logging].enable_percentage_of_time 5
-# flipper[:new_cache].enable_percentage_of_actors 15
-# flipper["a/b"].add
-
-run Flipper::UI.app(flipper) { |builder|
+# Flipper.enable(:search_performance_another_long_thing)
+# Flipper.disable(:gauges_tracking)
+# Flipper.disable(:unused)
+# Flipper.enable_actor(:suits, Flipper::Actor.new('1'))
+# Flipper.enable_actor(:suits, Flipper::Actor.new('6'))
+# Flipper.enable_group(:secrets, :admins)
+# Flipper.enable_group(:secrets, :early_access)
+# Flipper.enable_percentage_of_time(:logging, 5)
+# Flipper.enable_percentage_of_actors(:new_cache, 15)
+# Flipper.add("a/b")
+
+run Flipper::UI.app { |builder|
   builder.use Rack::Session::Cookie, secret: "_super_secret"
 }

data/flipper-ui.gemspec

@@ -21,7 +21,8 @@ Gem::Specification.new do |gem|
   gem.metadata      = Flipper::METADATA
 
   gem.add_dependency 'rack', '>= 1.4', '< 3'
-  gem.add_dependency 'rack-protection', '>= 1.5.3', '< 2.2.0'
+  gem.add_dependency 'rack-protection', '>= 1.5.3', '<= 2.3.0'
   gem.add_dependency 'flipper', "~> #{Flipper::VERSION}"
   gem.add_dependency 'erubi', '>= 1.0.0', '< 2.0.0'
+  gem.add_dependency 'sanitize', '< 7'
 end

data/lib/flipper/ui/action.rb

@@ -3,6 +3,7 @@ require 'flipper/ui/configuration'
 require 'flipper/ui/error'
 require 'erubi'
 require 'json'
+require 'sanitize'
 
 module Flipper
   module UI
@@ -26,6 +27,36 @@ module Flipper
                                              'delete'.freeze,
                                            ]).freeze
 
+      SOURCES = {
+        bootstrap_css: {
+          src: 'https://cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css'.freeze,
+          hash: 'sha384-B0vP5xmATw1+K9KRQjQERJvTumQW0nPEzvF6L/Z6nronJ3oUOFUFpCjEUQouq2+l'.freeze
+        }.freeze,
+        jquery_js: {
+          src: 'https://code.jquery.com/jquery-3.6.0.slim.js'.freeze,
+          hash: 'sha256-HwWONEZrpuoh951cQD1ov2HUK5zA5DwJ1DNUXaM6FsY='.freeze
+        }.freeze,
+        popper_js: {
+          src: 'https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js'.freeze,
+          hash: 'sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39j7fakFPskvXusvfa0b4Q'.freeze
+        }.freeze,
+        bootstrap_js: {
+          src: 'https://cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/js/bootstrap.min.js'.freeze,
+          hash: 'sha384-+YQ4JLhjyBLPDQt//I+STsc9iw4uQqACwlvpslubQzn4u2UU2UFM80nGisd026JF'.freeze
+        }.freeze
+      }.freeze
+      SCRIPT_SRCS = SOURCES.values_at(:jquery_js, :popper_js, :bootstrap_js).map { |s| s[:src] }
+      STYLE_SRCS = SOURCES.values_at(:bootstrap_css).map { |s| s[:src] }
+      CONTENT_SECURITY_POLICY = <<-CSP.delete("\n")
+        default-src 'none';
+        img-src 'self';
+        font-src 'self';
+        script-src 'report-sample' 'self' #{SCRIPT_SRCS.join(' ')};
+        style-src 'self' 'unsafe-inline' #{STYLE_SRCS.join(' ')};
+        style-src-attr 'unsafe-inline' ;
+        style-src-elem 'self' #{STYLE_SRCS.join(' ')};
+      CSP
+
       # Public: Call this in subclasses so the action knows its route.
       #
       # regex - The Regexp that this action should run for.
@@ -130,6 +161,7 @@ module Flipper
       # Returns a response.
       def view_response(name)
         header 'Content-Type', 'text/html'
+        header 'Content-Security-Policy', CONTENT_SECURITY_POLICY
         body = view_with_layout { view_without_layout name }
         halt [@code, @headers, [body]]
       end
@@ -151,7 +183,7 @@ module Flipper
       # location - The String location to set the Location header to.
       def redirect_to(location)
         status 302
-        header 'Location', "#{script_name}#{location}"
+        header 'Location', "#{script_name}#{Rack::Utils.escape_path(location)}"
         halt [@code, @headers, ['']]
       end
 
@@ -207,6 +239,7 @@ module Flipper
       def view(name)
         path = views_path.join("#{name}.erb")
         raise "Template does not exist: #{path}" unless path.exist?
+
         eval(Erubi::Engine.new(path.read, escape: true).src)
       end
 
@@ -237,6 +270,22 @@ module Flipper
       def valid_request_method?
         VALID_REQUEST_METHOD_NAMES.include?(request_method_name)
       end
+
+      def bootstrap_css
+        SOURCES[:bootstrap_css]
+      end
+
+      def bootstrap_js
+        SOURCES[:bootstrap_js]
+      end
+
+      def popper_js
+        SOURCES[:popper_js]
+      end
+
+      def jquery_js
+        SOURCES[:jquery_js]
+      end
     end
   end
 end

data/lib/flipper/ui/actions/actors_gate.rb

@@ -25,19 +25,22 @@ module Flipper
         def post
           feature = flipper[feature_name]
           value = params['value'].to_s.strip
+          values = value.split(UI.configuration.actors_separator).map(&:strip).uniq
 
-          if Util.blank?(value)
-            error = Rack::Utils.escape("#{value.inspect} is not a valid actor value.")
+          if values.empty?
+            error = "#{value.inspect} is not a valid actor value."
             redirect_to("/features/#{feature.key}/actors?error=#{error}")
           end
 
-          actor = Flipper::Actor.new(value)
+          values.each do |value|
+            actor = Flipper::Actor.new(value)
 
-          case params['operation']
-          when 'enable'
-            feature.enable_actor actor
-          when 'disable'
-            feature.disable_actor actor
+            case params['operation']
+            when 'enable'
+              feature.enable_actor actor
+            when 'disable'
+              feature.disable_actor actor
+            end
           end
 
           redirect_to("/features/#{feature.key}")

data/lib/flipper/ui/actions/features.rb

@@ -49,14 +49,14 @@ module Flipper
           value = params['value'].to_s.strip
 
           if Util.blank?(value)
-            error = Rack::Utils.escape("#{value.inspect} is not a valid feature name.")
+            error = "#{value.inspect} is not a valid feature name."
             redirect_to("/features/new?error=#{error}")
           end
 
           feature = flipper[value]
           feature.add
 
-          redirect_to "/features/#{Rack::Utils.escape_path(value)}"
+          redirect_to "/features/#{value}"
         end
       end
     end

data/lib/flipper/ui/actions/file.rb

@@ -5,7 +5,7 @@ module Flipper
   module UI
     module Actions
       class File < UI::Action
-        route %r{(images|css|js|octicons)/.*\Z}
+        route %r{(images|css|js)/.*\Z}
 
         def get
           Rack::File.new(public_path).call(request.env)

data/lib/flipper/ui/actions/groups_gate.rb

@@ -35,7 +35,7 @@ module Flipper
 
             redirect_to("/features/#{feature.key}")
           else
-            error = Rack::Utils.escape("The group named #{value.inspect} has not been registered.")
+            error = "The group named #{value.inspect} has not been registered."
             redirect_to("/features/#{feature.key}/groups?error=#{error}")
           end
         end

data/lib/flipper/ui/actions/percentage_of_actors_gate.rb

@@ -16,7 +16,7 @@ module Flipper
           begin
             feature.enable_percentage_of_actors params['value']
           rescue ArgumentError => exception
-            error = Rack::Utils.escape("Invalid percentage of actors value: #{exception.message}")
+            error = "Invalid percentage of actors value: #{exception.message}"
             redirect_to("/features/#{@feature.key}?error=#{error}")
           end
 

data/lib/flipper/ui/actions/percentage_of_time_gate.rb

@@ -16,7 +16,7 @@ module Flipper
           begin
             feature.enable_percentage_of_time params['value']
           rescue ArgumentError => exception
-            error = Rack::Utils.escape("Invalid percentage of time value: #{exception.message}")
+            error = "Invalid percentage of time value: #{exception.message}"
             redirect_to("/features/#{@feature.key}?error=#{error}")
           end
 

data/lib/flipper/ui/configuration.rb

@@ -26,6 +26,10 @@ module Flipper
       # won't see a videoclip of Taylor Swift when there aren't any features
       attr_accessor :fun
 
+      # Public: Tired of seeing the awesome message about Cloud? Set this to
+      # false and it will go away. Defaults to true.
+      attr_accessor :cloud_recommendation
+
       # Public: What should show up in the form to add actors. This can be
       # different per application since flipper_id's can be whatever an
       # application needs. Defaults to "a flipper id".
@@ -40,6 +44,11 @@ module Flipper
       # Default false. Only works when using descriptions.
       attr_accessor :show_feature_description_in_list
 
+      # Public: What should be used to denote you are trying to add multiple
+      # actors at once (instead of just a single actor).
+      # Default is comma ",".
+      attr_accessor :actors_separator
+
       VALID_BANNER_CLASS_VALUES = %w(
         danger
         dark
@@ -60,9 +69,11 @@ module Flipper
         @feature_creation_enabled = true
         @feature_removal_enabled = true
         @fun = true
+        @cloud_recommendation = true
         @add_actor_placeholder = "a flipper id"
         @descriptions_source = DEFAULT_DESCRIPTIONS_SOURCE
         @show_feature_description_in_list = false
+        @actors_separator = ','
       end
 
       def using_descriptions?

data/lib/flipper/ui/decorators/feature.rb

@@ -23,11 +23,11 @@ module Flipper
         def color_class
           case feature.state
           when :on
-            'text-success'
+            'bg-success'
           when :off
-            'text-danger'
+            'bg-danger'
           when :conditional
-            'text-warning'
+            'bg-warning'
           end
         end
 

data/lib/flipper/ui/middleware.rb

@@ -12,6 +12,7 @@ module Flipper
       def initialize(app, options = {})
         @app = app
         @env_key = options.fetch(:env_key, 'flipper')
+        @flipper = options.fetch(:flipper) { Flipper }
 
         @action_collection = ActionCollection.new
 
@@ -43,7 +44,7 @@ module Flipper
         if action_class.nil?
           @app.call(env)
         else
-          flipper = env.fetch(@env_key)
+          flipper = env.fetch(@env_key) { Flipper }
           action_class.run(flipper, request)
         end
       end

data/lib/flipper/ui/public/css/application.css

@@ -29,3 +29,10 @@ html {
 .toggle-on .toggle-block-when-off {
   display: none;
 }
+
+.status {
+  height: 10px;
+  width: 10px;
+  border-radius: 50%;
+  display: inline-block;
+}

data/lib/flipper/ui/public/js/application.js

@@ -1,6 +1,17 @@
-$(function() {
-  $(document).on('click', '.js-toggle-trigger', function() {
-    var $container = $(this).closest('.js-toggle-container');
-    return $container.toggleClass('toggle-on');
+$(function () {
+  $(document).on("click", ".js-toggle-trigger", function () {
+    var $container = $(this).closest(".js-toggle-container");
+    return $container.toggleClass("toggle-on");
+  });
+
+  $("#delete_feature__button").on("click", function (e) {
+    const featureName = $("#feature_name").val();
+    const promptMessage = prompt(
+      `Are you sure you want to remove this feature from the list of features and disable it for everyone? Please enter the name of the feature to confirm it: ${featureName}`
+    );
+    
+    if (promptMessage !== featureName) {
+      e.preventDefault();
+    }
   });
 });

data/lib/flipper/ui/views/add_actor.erb

@@ -8,7 +8,7 @@
   <h4 class="card-header">Enable Actor for <%= @feature.key %></h4>
   <div class="card-body">
     <p>
-      Turn on this feature for an individual actor.
+      Turn on this feature for actors.
     </p>
     <form action="<%= script_name %>/features/<%= @feature.key %>/actors" method="post" class="form-inline">
       <%== csrf_input_tag %>

data/lib/flipper/ui/views/feature.erb

@@ -9,7 +9,7 @@
     <div class="col">
       <div class="card">
         <div class="card-body">
-          <%= @feature.description %>
+          <%== Sanitize.fragment(@feature.description, Sanitize::Config::BASIC) %>
         </div>
       </div>
     </div>
@@ -21,7 +21,7 @@
     <div class="card">
       <%# Gate State Header %>
       <div class="card-header">
-        <span class="octicon octicon-squirrel <%= @feature.color_class %> mr-2"></span>
+        <span class="status <%= @feature.color_class %> mr-2"></span>
         <%= @feature.gate_state_title %>
       </div>
 
@@ -69,8 +69,8 @@
                   <%== csrf_input_tag %>
                   <input type="hidden" name="operation" value="disable">
                   <input type="hidden" name="value" value="<%= item %>">
-                  <button type="submit" value="Disable" class="btn btn-link btn-sm text-danger" data-toggle="tooltip" title="Disable <%= item %>" data-placement="left">
-                    <span class="octicon octicon-trashcan"></span>
+                  <button type="submit" value="Disable" class="btn btn-outline-danger" data-toggle="tooltip" title="Disable <%= item %>" data-placement="left">
+                    Remove
                   </button>
                 </form>
               </div>
@@ -130,8 +130,8 @@
                   <%== csrf_input_tag %>
                   <input type="hidden" name="operation" value="disable">
                   <input type="hidden" name="value" value="<%= item %>">
-                  <button type="submit" value="Disable" class="btn btn-link btn-sm text-danger" data-toggle="tooltip" title="Disable <%= item %>" data-placement="left">
-                    <span class="octicon octicon-trashcan"></span>
+                  <button type="submit" value="Disable" class="btn btn-outline-danger" data-toggle="tooltip" title="Disable <%= item %>" data-placement="left">
+                    Remove
                   </button>
                 </form>
               </div>
@@ -258,11 +258,11 @@
           <p>
             <%= Flipper::UI.configuration.delete.description %>
           </p>
-
-          <form action="<%= script_name %>/features/<%= @feature.key %>" method="post" onsubmit="return confirm('Are you sure you want to remove this feature from the list of features and disable it for everyone?')">
+          <form action="<%= script_name %>/features/<%= @feature.key %>" method="post">
             <%== csrf_input_tag %>
+            <input type="hidden" id="feature_name" name="_feature" value="<%= feature_name %>">
             <input type="hidden" name="_method" value="DELETE">
-            <button type="submit" name="action" value="Delete" class="btn btn-outline-danger" data-toggle="tooltip" title="Remove feature from list of features and disable it." data-placement="right">Delete</button>
+            <button type="submit" name="action" value="Delete" id="delete_feature__button" class="btn btn-outline-danger" data-toggle="tooltip" title="Remove feature from list of features and disable it." data-placement="right">Delete</button>
           </form>
         </div>
       </div>

data/lib/flipper/ui/views/features.erb

@@ -1,5 +1,5 @@
 <% if @show_blank_slate %>
-  <div class="jumbotron text-center">
+  <div class="jumbotron text-center m-0">
     <% if Flipper::UI.configuration.fun %>
       <h4>But I've got a blank space baby...</h4>
       <p>And I'll flip your features.</p>
@@ -8,9 +8,6 @@
           <a class="btn btn-primary btn-sm" href="<%= script_name %>/features/new">Add Feature</a>
         </p>
       <%- end -%>
-      <div class="embed-responsive embed-responsive-16by9">
-        <iframe class="embed-responsive-item" width="560" height="315" src="https://www.youtube.com/embed/e-ORhEE9VVg" frameborder="0" allowfullscreen></iframe>
-      </div>
     <% else %>
       <h4>Getting Started</h4>
       <p class="mb-1">You have not added any features to configure yet.</p>
@@ -40,14 +37,14 @@
       <% @features.each do |feature| %>
         <div class="feature row align-items-center mt-0 px-3 border-bottom">
           <div class="col-1 col-md-auto">
-            <span class="octicon octicon-squirrel <%= feature.color_class %>" data-toggle="tooltip" title=<%= feature.state.to_s.capitalize %>></span>
+            <span class="status <%= feature.color_class %>" data-toggle="tooltip" title=<%= feature.state.to_s.capitalize %>></span>
           </div>
           <div class="col-10">
             <a href="<%= "#{script_name}/features/#{feature.key}" %>" class="d-block px-0 py-3 btn text-left text-dark">
               <div class="text-truncate" style="font-weight: 500"><%= feature.key %></div>
               <% if Flipper::UI.configuration.show_feature_description_in_list? && Flipper::UI::Util.present?(feature.description) %>
                 <div class="text-muted font-weight-light" style="line-height: 1.4; white-space: initial; padding: 8px 0">
-                  <%= feature.description %>
+                  <%== Sanitize.fragment(feature.description, Sanitize::Config::BASIC) %>
                 </div>
               <% end %>
               <div class="text-muted text-truncate">

data/lib/flipper/ui/views/layout.erb

@@ -6,15 +6,14 @@
     <meta http-equiv="X-UA-Compatible" content="IE=edge">
     <meta name="viewport" content="width=device-width, initial-scale=1">
 
-    <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css" integrity="sha384-Gn5384xqQ1aoWXA+058RXPxPg6fy4IWvTNh0E263XmFcJlSAwiGgFAW/dAiS6JXm" crossorigin="anonymous">
-    <link rel="stylesheet" href="<%= script_name %>/octicons/octicons.css">
+    <link rel="stylesheet" href="<%= bootstrap_css[:src] %>" integrity="<%= bootstrap_css[:hash] %>" crossorigin="anonymous">
     <link rel="stylesheet" href="<%= script_name %>/css/application.css">
   </head>
   <body class="py-4">
     <div class="container mw-600">
       <%- unless Flipper::UI.configuration.banner_text.nil? -%>
         <div class="alert alert-<%= Flipper::UI.configuration.banner_class %> text-center font-weight-bold">
-          <%= Flipper::UI.configuration.banner_text %>
+          <%== Sanitize.fragment(Flipper::UI.configuration.banner_text, Sanitize::Config::BASIC) %>
         </div>
       <%- end -%>
 
@@ -35,11 +34,26 @@
       <div>
         <%== yield %>
       </div>
+
+      <% if Flipper::UI.configuration.cloud_recommendation %>
+        <div class="d-flex justify-content-center mt-5">
+          <div class="row" style="max-width: 350px;">
+            <div class="col-auto d-flex align-items-center">
+              <a href="https://www.flippercloud.io/?utm_source=oss&utm_medium=ui&utm_campaign=spread_the_love">
+                <img src="<%= script_name %>/images/logo.png" width="50" />
+              </a>
+            </div>
+            <div class="col text-muted p-0">
+              <small>For support, audit history, finer-grained permissions, multi-environment sync, and all your projects in one place check out <a href="https://www.flippercloud.io/?utm_source=oss&utm_medium=ui&utm_campaign=spread_the_love">Flipper&nbsp;Cloud</a>.</small>
+            </div>
+          </div>
+        </div>
+      <% end %>
     </div>
 
-    <script src="https://code.jquery.com/jquery-3.2.1.slim.min.js" integrity="sha384-KJ3o2DKtIkvYIK3UENzmM7KCkRr/rE9/Qpg6aAZGJwFDMVNA/GpGFF93hXpG5KkN" crossorigin="anonymous"></script>
-    <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39j7fakFPskvXusvfa0b4Q" crossorigin="anonymous"></script>
-    <script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js" integrity="sha384-JZR6Spejh4U02d8jOt6vLEHfe/JQGiRRSQQxSfFWpi1MquVdAyjUar5+76PVCmYl" crossorigin="anonymous"></script>
+    <script src="<%= jquery_js[:src] %>" integrity="<%= jquery_js[:hash] %>" crossorigin="anonymous"></script>
+    <script src="<%= popper_js[:src] %>" integrity="<%= popper_js[:hash] %>" crossorigin="anonymous"></script>
+    <script src="<%= bootstrap_js[:src] %>" integrity="<%= bootstrap_js[:hash] %>" crossorigin="anonymous"></script>
     <script src="<%= script_name %>/js/application.js"></script>
   </body>
 </html>

data/lib/flipper/ui.rb

@@ -14,24 +14,6 @@ require 'flipper/ui/configuration'
 
 module Flipper
   module UI
-    class << self
-      # These three configuration options have been moved to Flipper::UI::Configuration
-      deprecated_configuration_options = %w(application_breadcrumb_href
-                                            feature_creation_enabled
-                                            feature_removal_enabled)
-      deprecated_configuration_options.each do |attribute_name|
-        send(:define_method, "#{attribute_name}=".to_sym) do
-          raise ConfigurationDeprecated, "The UI configuration for #{attribute_name} has " \
-            "deprecated. This configuration option has moved to Flipper::UI::Configuration"
-        end
-
-        send(:define_method, attribute_name.to_sym) do
-          raise ConfigurationDeprecated, "The UI configuration for #{attribute_name} has " \
-            "deprecated. This configuration option has moved to Flipper::UI::Configuration"
-        end
-      end
-    end
-
     def self.root
       @root ||= Pathname(__FILE__).dirname.expand_path.join('ui')
     end
@@ -39,18 +21,19 @@ module Flipper
     def self.app(flipper = nil, options = {})
       env_key = options.fetch(:env_key, 'flipper')
       rack_protection_options = options.fetch(:rack_protection, use: :authenticity_token)
+
       app = ->(_) { [200, { 'Content-Type' => 'text/html' }, ['']] }
       builder = Rack::Builder.new
       yield builder if block_given?
       builder.use Rack::Protection, rack_protection_options
       builder.use Rack::MethodOverride
       builder.use Flipper::Middleware::SetupEnv, flipper, env_key: env_key
-      builder.use Flipper::Middleware::Memoizer, env_key: env_key
-      builder.use Flipper::UI::Middleware, env_key: env_key
+      builder.use Flipper::UI::Middleware, flipper: flipper, env_key: env_key
       builder.run app
       klass = self
-      builder.define_singleton_method(:inspect) { klass.inspect } # pretty rake routes output
-      builder
+      app = builder.to_app
+      app.define_singleton_method(:inspect) { klass.inspect } # pretty rake routes output
+      app
     end
 
     # Public: yields configuration instance for customizing UI text

data/lib/flipper/version.rb

@@ -1,3 +1,3 @@
 module Flipper
-  VERSION = '0.20.0'.freeze
+  VERSION = '0.25.2'.freeze
 end

data/spec/flipper/ui/action_spec.rb

@@ -1,5 +1,3 @@
-require 'helper'
-
 RSpec.describe Flipper::UI::Action do
   describe 'request methods' do
     let(:action_subclass) do