hancock 0.0.2 → 0.0.3

data/Rakefile

@@ -6,7 +6,7 @@ require 'spec/rake/spectask'
 require 'cucumber/rake/task'
 
 GEM = "hancock"
-GEM_VERSION = "0.0.2"
+GEM_VERSION = "0.0.3"
 AUTHOR = ["Corey Donohoe", "Tim Carey-Smith"]
 EMAIL = [ "atmos@atmos.org", "tim@spork.in" ]
 HOMEPAGE = "http://github.com/atmos/hancock"

data/lib/sinatra/hancock/sessions.rb

@@ -20,7 +20,7 @@ module Sinatra
                 session['return_to'] = trust_root
               end
             else
-              throw(:halt, [403, 'Forbidden'])
+              forbidden!
             end
           end
           throw(:halt, [401, haml(:unauthenticated)]) unless session_user
@@ -32,6 +32,7 @@ module Sinatra
         app.template(:unauthenticated) { sessions_template('unauthenticated') }
         app.get '/sso/login' do
           ensure_authenticated
+          redirect '/'
         end
         app.post '/sso/login' do
           @user = ::Hancock::User.authenticate(params['email'], params['password'])

data/spec/features/sessions.feature

@@ -22,3 +22,8 @@ Feature: Logging In to an SSO Account
       Then I should see the login form
       When I login
       Then I should be redirected to the sso provider root on login
+    Scenario: logging in with a bad return_to cookie set
+      Given a valid consumer and user exists
+      Then I login
+      When I request the login page
+      Then I should be redirected to the sso provider root

data/spec/features/step_definitions/sessions_steps.rb

@@ -29,3 +29,8 @@ Then /^I should see a list of consumers$/ do
   last_response.headers['Location'].should eql('/')
   follow_redirect!
 end
+
+When /^I request the login page$/ do
+  get '/sso/login'
+  pp last_response
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification 
 name: hancock
 version: !ruby/object:Gem::Version 
-  version: 0.0.2
+  version: 0.0.3
 platform: ruby
 authors: 
 - Corey Donohoe
@@ -10,7 +10,7 @@ autorequire: hancock
 bindir: bin
 cert_chain: []
 
-date: 2009-03-19 00:00:00 -06:00
+date: 2009-03-21 00:00:00 -06:00
 default_executable: 
 dependencies: 
 - !ruby/object:Gem::Dependency