forest_liana 3.0.0.pre.beta.15 → 3.0.0.pre.beta.16

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 94f79f5df9cdac1a5b97d2f04c76d48a8a116e1a
-  data.tar.gz: f47790fdddff55d8d02e433ea17e462b073564f0
+  metadata.gz: 771c7f710235e9a37b708b768fed552ebb1112e4
+  data.tar.gz: 305988ac4fac4b6b3a635d238c8d79be29f6cf9c
 SHA512:
-  metadata.gz: 4b0913455deaf13fa8573e6447fdd99481b9ce9dc510d208a70aed5b54e5ca71fd7794b2b8803873f3b882f750430ffc3e6a4eee3c65ef08bebea3b25b16a0cb
-  data.tar.gz: 2afc4b23ee3a03f932db9231e38f5e7704759ade5632d0b87908c9d0120bf1eab73cdf2b6bea34c286d652f53b5840ded7863e351f50388ec0971dd1177a5590
+  metadata.gz: 529274c1d3ed7c3e9f063eed6ded75055c027e5a6b0f7d6a97621b8186e32992defb61fc59869c5b29f25be57243dd844d15d17e89111ce6fc8a478a053f27b5
+  data.tar.gz: d76643b4229e0cbdbf3cfde7f80615dceb31830dc0a55caa00c572750cfa4793dd67fc74ed0df2a321fb2730b9cd94e1d9e4d07de454e5e549809bee83de5083

data/app/controllers/forest_liana/application_controller.rb

@@ -3,7 +3,7 @@ require 'csv'
 
 module ForestLiana
   class ApplicationController < ForestLiana::BaseController
-    REGEX_COOKIE_SESSION_TOKEN = /sessionToken=(.*);?/;
+    REGEX_COOKIE_SESSION_TOKEN = /forest_session_token=([^;]*)/;
 
     def self.papertrail?
       Object.const_get('PaperTrail::Version').is_a?(Class) rescue false

data/app/controllers/forest_liana/sessions_controller.rb

@@ -82,6 +82,10 @@ module ForestLiana
 
         render(serializer: nil, json: nil, status: :internal_server_error)
       else
+        # NOTICE: Set a cookie to ensure secure authentication using export feature.
+        # NOTICE: The token is empty at first authentication step if the 2FA option is active.
+        response.set_cookie("forest_session_token", reponse_data[:token]) if reponse_data[:token]
+
         render(json: reponse_data, serializer: nil)
       end
     end

data/lib/forest_liana/engine.rb

@@ -23,7 +23,7 @@ module ForestLiana
             hostnames += ENV['CORS_ORIGINS'].split(',') if ENV['CORS_ORIGINS']
 
             origins hostnames
-            resource '*', headers: :any, methods: :any, max_age: 86400 # NOTICE: 1 day
+            resource '*', headers: :any, methods: :any, credentials: true, max_age: 86400 # NOTICE: 1 day
           end
         end
         nil

data/lib/forest_liana/version.rb

@@ -1,3 +1,3 @@
 module ForestLiana
-  VERSION = "3.0.0-beta.15"
+  VERSION = "3.0.0-beta.16"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: forest_liana
 version: !ruby/object:Gem::Version
-  version: 3.0.0.pre.beta.15
+  version: 3.0.0.pre.beta.16
 platform: ruby
 authors:
 - Sandro Munda
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-03-27 00:00:00.000000000 Z
+date: 2019-03-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails