invalid_authenticity_token_rescue 0.1.1 → 0.1.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 1f08ba25a0b309cffec24e7782ad900b7d5666b5
-  data.tar.gz: 82b3e3e7e55ae535102e75205b8e0a56e8e70032
+  metadata.gz: 221f3a568b558f96fb75f9a4b771836e7819c398
+  data.tar.gz: 166685c38259fc233e1e94c345524f992ae345d4
 SHA512:
-  metadata.gz: 46e4d699d28400d851f81b1549ca3d7ed1246b6cad636bbbf28493c6bfe4479b410966ca7b04fb5a1c8a6443e87869d1ce854a5ee65f261ccae29a1ede1cb077
-  data.tar.gz: b64498f04c411dca28177b295b15941aaea54d09637ce267eb5d4f832bb9784499f3b5dccc8096dc970239a6313b12ab54eef2b6040d8c82bb32b6759343b659
+  metadata.gz: e67417d3d9e433c48f9e9770f98f05126265d723563d24b91361334ebd32c31aa05b77fe0810e91628f1405af328f88347eee47455a1698b770b48ab93085b8b
+  data.tar.gz: 172d335b09fafb91b12257761c22edd3f28e21ad00e8536e9534f35c30f8334faab28269a0341b02732f8d7045d69d4e53c73be16a2065b5fa84e5c1bd223b58

data/README.md

@@ -29,15 +29,25 @@ Add **skip_before_action** to public forms (optional):
 
 ```ruby
 class SessionsController < ApplicationController
-  skip_before_action :verify_authenticity_token, on: :create
+  skip_before_action :verify_authenticity_token, only: :create
   ...
 end
 ```
 
-Adding **skip_before_action** is optional but will improve user experience. Rails **protect_from_forgery** is intended to prevent a logged in user's credentials from being maliciously used to submit a form as that user. Publicly accessible forms, like a login page, that do not rely on a currently logged in user are not susceptible to forgery attacks.
+Adding **skip_before_action** to public forms is optional but will improve user experience. Rails **protect_from_forgery** is intended to prevent a logged in user's credentials from being maliciously used to submit a form as that user. Publicly accessible forms, like a login page, that do not rely on a currently logged in user are not susceptible to forgery attacks.
 
 Adding **skip_before_action** will allow the request to complete and the users session to be setup with the correct token. Subsequent forms submitted by the user will complete successfully. If **skip_before_action** is not added the user will be redirected to the login page and notifed that their session has expired and they need to login again.
 
+## Configuration
+The default **redirect_path** is *new_session_path*. This can be set to a different value with an initializer.
+
+```ruby
+# config/initializers/invalid_authenticity_token_rescue.rb
+InvalidAuthenticityTokenRescue.configure do |config|
+  config.redirect_path = 'sign_in_path'
+end
+```
+
 ## Contributing
 Bug reports and pull requests are welcome on GitHub at https://github.com/wwidea/invalid_authenticity_token_rescue.
 

data/lib/invalid_authenticity_token_rescue.rb

@@ -1,3 +1,4 @@
+require 'invalid_authenticity_token_rescue/configuration'
 require 'invalid_authenticity_token_rescue/railtie'
 
 module InvalidAuthenticityTokenRescue
@@ -15,7 +16,7 @@ module InvalidAuthenticityTokenRescue
     def invalid_authenticity_token(exception)
       ExceptionNotifier.notify_exception(exception, env: request.env)
       flash[:warning] = 'Your session has expired, please log in again'
-      redirect_to new_session_path
+      redirect_to send(InvalidAuthenticityTokenRescue.configuration.redirect_path)
     end
   end
 end

data/lib/invalid_authenticity_token_rescue/configuration.rb

@@ -0,0 +1,17 @@
+module InvalidAuthenticityTokenRescue
+  def self.configure
+    yield configuration
+  end
+  
+  def self.configuration
+    @configuration ||= Configuration.new
+  end
+  
+  class Configuration
+    attr_accessor :redirect_path
+    
+    def initialize
+      @redirect_path = 'new_session_path'
+    end
+  end
+end

data/lib/invalid_authenticity_token_rescue/version.rb

@@ -1,3 +1,3 @@
 module InvalidAuthenticityTokenRescue
-  VERSION = '0.1.1'
+  VERSION = '0.1.2'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: invalid_authenticity_token_rescue
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.2
 platform: ruby
 authors:
 - Aaron Baldwin
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-04-10 00:00:00.000000000 Z
+date: 2017-04-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -71,6 +71,7 @@ files:
 - README.md
 - Rakefile
 - lib/invalid_authenticity_token_rescue.rb
+- lib/invalid_authenticity_token_rescue/configuration.rb
 - lib/invalid_authenticity_token_rescue/railtie.rb
 - lib/invalid_authenticity_token_rescue/version.rb
 - lib/tasks/invalid_authenticity_token_rescue_tasks.rake