macaw_framework 1.2.2 → 1.2.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 75201cbb67c0e3d1f913751ed085cf3102f42794a3d5f3721b4acd00234ac257
-  data.tar.gz: 1b15fe1043c6213fe8a7f5be7ea22f2ed1bd6c917215de79edf66b622e6c2e85
+  metadata.gz: 17a2ff330e9f546997fcbbcbbc8bc0e08af19c08980056999b60f3307aaf898d
+  data.tar.gz: 2af901040509fcd7feecaa5bc9cc762967f9530cd6277b6fc0d4ac1fe5a3bb20
 SHA512:
-  metadata.gz: 0f6feb4910080a14c3908a8f5d89d5768fbf40e40882f8d98e6ecfdcf99475ec86e0522bd09f0db9b73577e2e1b72912f1db9da169271ac5b403bc680e09a0a4
-  data.tar.gz: 2417693c644f10af4c4a23186dde6451405c1a34c595ec507292f5eba1f7451193a4e728b9cd28195bc1010ab22f8f4a7368240e016e3f871515cb3ec22ea242
+  metadata.gz: 07127b57e24d02a95a9bc444bc444bb3ce44d9f80c6fc9f08b5155c88a3355bd20ee93ae5831f028596b114a4cb200c31bd5247bff8ba043d65f844c426a6bd7
+  data.tar.gz: 4ca1a0f63ea1feb4de1b712f63b786286b791bc9df255011b4ef7acf5a740076c65821b13311bf5c3741bfde945ba0f83dae8ad0073bb56dab6962295b1dc7b5

data/CHANGELOG.md

@@ -119,3 +119,12 @@
 ## [1.2.2]
 
 - Including possibility of setting port, bind and threads programmatically
+
+## [1.2.3]
+
+- Fixing import of pathname
+
+## [1.2.4]
+
+- Fixing small bug on lof during endpoint declaration
+- Disclosing security issue on session storage

data/Gemfile

@@ -2,20 +2,15 @@
 
 source "https://rubygems.org"
 
-# Specify your gem's dependencies in macaw_framework.gemspec
 gemspec
 
-gem "rake", "~> 13.0"
-
-gem "minitest", "~> 5.0"
-
-gem "rubocop", "~> 1.21"
-
-gem "prometheus-client", "~> 4.1"
-
 gem "openssl"
+gem "prometheus-client", "~> 4.1"
 
 group :test do
+  gem "minitest", "~> 5.0"
+  gem "rake", "~> 13.0"
+  gem "rubocop", "~> 1.21"
   gem "simplecov", "~> 0.21.2"
   gem "simplecov-json"
   gem "simplecov_json_formatter", "~> 0.1.2"

data/README.md

@@ -111,7 +111,7 @@ end
 
 *Observation: To activate caching, you also have to set its properties in the `application.json` file. If you don't, the caching strategy will not work. See the Configuration section below for more details.*
 
-### Session management: Handle user sessions securely with server-side in-memory storage
+### Session management: Handle user sessions with server-side in-memory storage
 
 ```ruby
 m.get('/login') do |context|
@@ -129,6 +129,8 @@ m.get('/dashboard') do |context|
 end
 ```
 
+**Caution: This feature is vulnerable to IP spoofing and may disrupt sessions on devices sharing the same network (e.g., Wi-Fi).**
+
 ### Configuration: Customize various aspects of the framework through the application.json configuration file, such as rate limiting, SSL support, and Prometheus integration
 
 ```json

data/lib/macaw_framework/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module MacawFramework
-  VERSION = "1.2.2"
+  VERSION = "1.2.4"
 end

data/lib/macaw_framework.rb

@@ -9,6 +9,7 @@ require_relative "macaw_framework/core/thread_server"
 require_relative "macaw_framework/version"
 require "prometheus/client"
 require "securerandom"
+require "pathname"
 require "logger"
 require "socket"
 require "json"
@@ -197,7 +198,8 @@ module MacawFramework
     def map_new_endpoint(prefix, cache, path, &block)
       @endpoints_to_cache << "#{prefix}.#{RequestDataFiltering.sanitize_method_name(path)}" if cache
       path_clean = RequestDataFiltering.extract_path(path)
-      @macaw_log&.info("Defining #{prefix.upcase} endpoint at /#{path}")
+      slash = path[0] == "/" ? "" : "/"
+      @macaw_log&.info("Defining #{prefix.upcase} endpoint at #{slash}#{path}")
       define_singleton_method("#{prefix}.#{path_clean}", block || lambda {
         |context = { headers: {}, body: "", params: {} }|
       })

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: macaw_framework
 version: !ruby/object:Gem::Version
-  version: 1.2.2
+  version: 1.2.4
 platform: ruby
 authors:
 - Aria Diniz
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2023-12-11 00:00:00.000000000 Z
+date: 2024-02-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: prometheus-client