mongo_session_store 3.2.1 → 3.3.0

data/README.md

@@ -1,8 +1,8 @@
 # MongoSessionStore
 
-[![Build Status](https://travis-ci.org/mongoid/mongo_session_store.svg?branch=master)](https://travis-ci.org/mongoid/mongo_session_store)
+[![CI](https://github.com/mongoid/mongo_session_store/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/mongoid/mongo_session_store/actions/workflows/ci.yml?query=branch%3Amain)
 [![Gem Version](https://badge.fury.io/rb/mongo_session_store.svg)](http://badge.fury.io/rb/mongo_session_store)
-[![Code Climate](https://codeclimate.com/github/mongoid/mongo_session_store/badges/gpa.svg)](https://codeclimate.com/github/mongoid/mongo_session_store)
+[![Coverage Status](https://coveralls.io/repos/github/mongoid/mongo_session_store/badge.svg?branch=main)](https://coveralls.io/github/mongoid/mongo_session_store?branch=main)
 
 ## Description
 
@@ -11,7 +11,7 @@ MongoSessionStore is a [Rails][rails]-compatible session store for
 Driver][mongo]. It also allows for custom Mongo session store that works with
 any (or no!) Mongo ODM.
 
-MongoSessionStore version 3 is compatible with Rails 4.0 through 5.2. For Rails
+MongoSessionStore version 3 is compatible with Rails 5.0+. For Rails
 3 support please check out issue [#17][issue-rails3] for options and let us
 know if you need support.
 
@@ -68,13 +68,57 @@ MongoidStore::Session.where(:updated_at.gt => 2.days.ago)
 MongoStore::Session.where("updated_at" => { "$gt" => 2.days.ago })
 ```
 
+### Serializable session values
+
+Both adapters serialize session data with Ruby's `Marshal`. Store serializable values such as strings, numbers, arrays, and hashes, not requests, input streams, or uploaded files. Serialization errors are raised rather than silently discarding data.
+
+Do not store `ActionController::Parameters` objects directly in the session. On Rails 7 and newer, their logging context can retain the request and its input stream, causing `TypeError: can't dump IO` (or a similar error for `StringIO`). A nested `params[:search]` object can retain that context too. Explicitly permit the values your application needs and convert them to a hash before saving:
+
+```ruby
+session[:search] = params.require(:search).permit(:query, :sort).to_h
+```
+
+This stores the permitted values without the request context. It does not make uploaded files or other non-serializable values serializable; store a durable identifier for those instead.
+
+### Deleting stale sessions
+
+Sessions are not automatically expired or deleted. To opt in to cleanup, call the store's `delete_stale_sessions` method with an explicit `Time` cutoff:
+
+```ruby
+# Mongoid
+MongoidStore.delete_stale_sessions(before: 1.week.ago)
+
+# MongoDB Ruby Driver
+MongoStore.delete_stale_sessions(before: 1.week.ago)
+```
+
+The method returns the number deleted and uses the configured session collection. It performs a bulk database deletion without loading session data or running model callbacks. Only records whose `updated_at` is strictly earlier than the cutoff are deleted; records at the cutoff or without a timestamp are retained. Invalid cutoffs raise `ArgumentError`, and database errors propagate to the caller.
+
+Run cleanup explicitly from a scheduled job or a Rails runner command, choosing a retention policy appropriate for your application:
+
+```sh
+bin/rails runner 'MongoidStore.delete_stale_sessions(before: 1.week.ago)'
+```
+
+Deleting a session signs that session out on its next request. Cleanup is not cookie expiration or a guarantee of inactivity-based logout: `updated_at` tracks session saves, and a request that does not save the session may not refresh it. No default maximum age, background job, or TTL index is installed. For large collections, consider creating an ordinary index on `updated_at` as part of your database setup.
+
 ## Development
 
+### Test environment
+
+Start MongoDB with this script:
+
+```
+script/testenv
+```
+
 ### Testing
 
 To run the tests for a specific store. You must first set a `BUNDLE_GEMFILE` in
 the environment.
 
+You can also use Docker, see the section below this one.
+
 ```sh
 bundle exec rake
 ```
@@ -82,12 +126,6 @@ bundle exec rake
 Examples:
 
 ```sh
-BUNDLE_GEMFILE=gemfiles/rails-4.0-mongo.gemfile bundle exec rake
-BUNDLE_GEMFILE=gemfiles/rails-4.0-mongoid.gemfile bundle exec rake
-BUNDLE_GEMFILE=gemfiles/rails-4.1-mongo.gemfile bundle exec rake
-BUNDLE_GEMFILE=gemfiles/rails-4.1-mongoid.gemfile bundle exec rake
-BUNDLE_GEMFILE=gemfiles/rails-4.2-mongo.gemfile bundle exec rake
-BUNDLE_GEMFILE=gemfiles/rails-4.2-mongoid.gemfile bundle exec rake
 BUNDLE_GEMFILE=gemfiles/rails-5.0-mongo.gemfile bundle exec rake
 BUNDLE_GEMFILE=gemfiles/rails-5.0-mongoid.gemfile bundle exec rake
 BUNDLE_GEMFILE=gemfiles/rails-5.1-mongo.gemfile bundle exec rake
@@ -98,6 +136,30 @@ BUNDLE_GEMFILE=gemfiles/rails-6.0-mongo.gemfile bundle exec rake
 BUNDLE_GEMFILE=gemfiles/rails-6.0-mongoid.gemfile bundle exec rake
 ```
 
+For Rails 6.1 and newer, use `gemfiles/rails-current-mongo.gemfile` or `gemfiles/rails-current-mongoid.gemfile` with `RAILS_VERSION` and, for Mongoid, `MONGOID_VERSION` constraints:
+
+```sh
+RAILS_VERSION='~> 7.2.0' MONGOID_VERSION='~> 9.0' BUNDLE_GEMFILE=gemfiles/rails-current-mongoid.gemfile bundle exec rake test
+```
+
+For Rails 8.0, also set `SQLITE_VERSION='~> 2.1'`; the dedicated Rails 8.1 Gemfiles already select SQLite 2.
+
+Set `MONGODB_HOST` and `MONGODB_PORT` to use a non-default test server. The default is `127.0.0.1:27017`.
+
+#### Docker testing
+
+To run tests in a Docker container with a specific Ruby version and gemfile:
+
+```sh
+BUNDLE_GEMFILE=gemfiles/rails-6.0-mongo.gemfile script/test
+```
+
+The `BUNDLE_GEMFILE` environment variable is required. Ruby version defaults to 3.4 but can be customized:
+
+```sh
+RUBY_VERSION=2.7 BUNDLE_GEMFILE=gemfiles/rails-6.0-mongo.gemfile script/test
+```
+
 ### Performance benchmark
 
 The repository includes a performance benchmark. It runs against all available

data/RELEASING.md

@@ -0,0 +1,37 @@
+# Releasing
+
+Release from a clean local checkout of the upstream repository, not a fork. You need push access, RubyGems ownership with MFA, and an authenticated GitHub CLI.
+
+## Prepare
+
+1. Run `git switch main`, `git pull --ff-only`, and confirm that `origin` points to `mongoid/mongo_session_store`.
+2. Choose the next semantic version, update `lib/mongo_session_store/version.rb`, and replace the unreleased changelog heading with the version and release date. Remove the contribution placeholder.
+3. With MongoDB running, install dependencies and run `bundle exec rake test` using each supported adapter's `BUNDLE_GEMFILE`, for example `gemfiles/rails-6.0-mongo.gemfile` and `gemfiles/rails-6.0-mongoid.gemfile`. Run `bundle exec rubocop` with the default Gemfile.
+4. Commit the preparation, push `main`, and wait for the complete GitHub Actions matrix to pass for that commit.
+
+## Publish
+
+Do not use the legacy `rake release` task: it assumes `master` and performs interactive edits. Build and publish the prepared version explicitly:
+
+```sh
+version=3.2.2 # Replace with the version being released.
+gem build mongo_session_store.gemspec
+git tag "v$version"
+git push origin "v$version"
+gem push "mongo_session_store-$version.gem"
+```
+
+Enter a fresh RubyGems MFA code when prompted. Create a GitHub release from the same tag, using the matching changelog section as the release notes:
+
+```sh
+gh release create "v$version" --repo mongoid/mongo_session_store \
+  --verify-tag --title "$version" --notes-file /path/to/release-notes.md --latest
+```
+
+Verify the exact version at `https://rubygems.org/gems/mongo_session_store/versions/VERSION` and inspect `gh release view "v$version" --repo mongoid/mongo_session_store` to confirm a published, non-draft release.
+
+If publication is interrupted, check the remote tag, RubyGems version, and GitHub release first. Resume only the missing step; never move a published tag or rebuild an already published version. If the gem push needs a new code, retry that command with `--otp CODE`.
+
+## Next development version
+
+Increment the patch version in `lib/mongo_session_store/version.rb`, add a new `## (unreleased)` section with a contribution placeholder, and commit and push the changes to `main`. Remove the local built gem after successful publication.

data/docker-compose.yml

@@ -0,0 +1,5 @@
+services:
+  mongodb:
+    image: mongo:3.6
+    ports:
+      - "27017:27017"

data/gemfiles/rails-5.1-mongoid.gemfile

@@ -1,6 +1,6 @@
 source "https://rubygems.org"
 
-gem "mongoid"
+gem "mongoid", "~> 7.0"
 
 gem "rails", "~> 5.1.0"
 gem "devise", ">= 4.2"

data/gemfiles/rails-6.0-mongo.gemfile

@@ -4,6 +4,9 @@ gem "mongo"
 
 gem "rails", "~> 6.0.0"
 gem "devise", "~> 4.7.0"
-gem "sqlite3", "~> 1.4.0"
+gem "sqlite3", "~> 1.4"
+gem "bigdecimal"
+gem "mutex_m"
+gem "drb"
 
 gemspec :path => "../"

data/gemfiles/rails-6.0-mongoid.gemfile

@@ -4,6 +4,9 @@ gem "mongoid"
 
 gem "rails", "~> 6.0.0"
 gem "devise", "~> 4.7.0"
-gem "sqlite3", "~> 1.4.0"
+gem "sqlite3", "~> 1.4"
+gem "bigdecimal"
+gem "mutex_m"
+gem "drb"
 
 gemspec :path => "../"

data/gemfiles/rails-8.1-mongo.gemfile

@@ -0,0 +1,15 @@
+source "https://rubygems.org"
+
+gem "mongo", "~> 2.0"
+gem "rails", "~> 8.1.0"
+gem "devise", "~> 5.0"
+gem "sqlite3", "~> 2.0"
+gem "bigdecimal"
+gem "mutex_m"
+gem "drb"
+gem "base64"
+gem "benchmark"
+gem "ostruct"
+gem "simplecov", "~> 0.22", :require => false
+
+gemspec :path => "../"

data/gemfiles/rails-8.1-mongoid.gemfile

@@ -0,0 +1,15 @@
+source "https://rubygems.org"
+
+gem "mongoid", "~> 9.0"
+gem "rails", "~> 8.1.0"
+gem "devise", "~> 5.0"
+gem "sqlite3", "~> 2.0"
+gem "bigdecimal"
+gem "mutex_m"
+gem "drb"
+gem "base64"
+gem "benchmark"
+gem "ostruct"
+gem "simplecov", "~> 0.22", :require => false
+
+gemspec :path => "../"

data/gemfiles/rails-current-mongo.gemfile

@@ -0,0 +1,16 @@
+source "https://rubygems.org"
+
+gem "rails", ENV.fetch("RAILS_VERSION", "~> 7.2.0")
+gem "mongo", "~> 2.0"
+gem "devise", "~> 4.9"
+gem "sqlite3", ENV.fetch("SQLITE_VERSION", "~> 1.4")
+gem "logger"
+gem "bigdecimal"
+gem "mutex_m"
+gem "drb"
+gem "base64"
+gem "benchmark"
+gem "ostruct"
+gem "simplecov", "~> 0.22", :require => false if ENV["COVERAGE"] == "true"
+
+gemspec :path => "../"

data/gemfiles/rails-current-mongoid.gemfile

@@ -0,0 +1,3 @@
+eval_gemfile "rails-current-mongo.gemfile"
+
+gem "mongoid", ENV.fetch("MONGOID_VERSION", "~> 9.0")

data/lib/mongo_session_store/mongo_store.rb

@@ -92,7 +92,7 @@ module ActionDispatch
         end
 
         def unpack(packed)
-          self.class.unpack(packed)
+          self.class.send(:unpack, packed)
         end
       end
     end

data/lib/mongo_session_store/mongo_store_base.rb

@@ -1,3 +1,4 @@
+require "action_dispatch"
 require "action_dispatch/middleware/session/abstract_store"
 
 module ActionDispatch
@@ -15,6 +16,12 @@ module ActionDispatch
         self::Session
       end
 
+      def self.delete_stale_sessions(before:)
+        raise ArgumentError, "before must be a Time" unless before.is_a?(Time)
+
+        session_class.collection.find("updated_at" => { "$lt" => before.getutc }).delete_many.deleted_count
+      end
+
       private
 
       def session_class

data/lib/mongo_session_store/mongoid_store.rb

@@ -38,6 +38,7 @@ module ActionDispatch
 
         def unpack(packed)
           return unless packed
+
           if packed.respond_to? :data
             Marshal.load(packed.data)
           else

data/lib/mongo_session_store/version.rb

@@ -1,3 +1,3 @@
 module MongoSessionStore
-  VERSION = "3.2.1".freeze
+  VERSION = "3.3.0".freeze
 end

data/mongo_session_store.gemspec

@@ -1,4 +1,4 @@
-require File.expand_path("../lib/mongo_session_store/version", __FILE__)
+require File.expand_path("lib/mongo_session_store/version", __dir__)
 
 Gem::Specification.new do |s|
   s.name = "mongo_session_store"
@@ -17,10 +17,7 @@ Gem::Specification.new do |s|
   s.add_dependency "actionpack", ">= 4.0"
   s.add_dependency "mongo", "~> 2.0"
 
-  s.add_development_dependency "rspec-rails", "~> 3.6"
-  s.add_development_dependency "capybara", "~> 2.15.0"
-  s.add_development_dependency "pry", "~> 0.10"
-  s.add_development_dependency "rake", "~> 11"
-  s.add_development_dependency "rubocop", "0.45.0"
-  s.add_development_dependency "mongoid-danger", "~> 0.1.0"
+  s.add_development_dependency "capybara", ">= 2.15"
+  s.add_development_dependency "rake"
+  s.add_development_dependency "rspec-rails", ">= 4.0"
 end

data/script/test

@@ -0,0 +1,20 @@
+#!/bin/bash
+
+set -eu
+
+if [ -z "${BUNDLE_GEMFILE:-}" ]; then
+  echo "Error: BUNDLE_GEMFILE environment variable is required"
+  echo "Example: BUNDLE_GEMFILE=gemfiles/rails-6.0-mongo.gemfile script/test"
+  exit 1
+fi
+
+RUBY_VERSION=${RUBY_VERSION:-3.4}
+
+docker run --rm -it \
+  --network mongo_session_store_default \
+  -e MONGODB_HOST=mongodb \
+  -e BUNDLE_GEMFILE="${BUNDLE_GEMFILE}" \
+  -v "$(pwd):/app" \
+  -w /app \
+  "ruby:${RUBY_VERSION}" \
+  /app/script/test_inner

data/script/test_inner

@@ -0,0 +1,19 @@
+#!/bin/bash
+
+set -eu
+
+export BUNDLE_GEMFILE
+export BUNDLE_PATH="/app/tmp/bundler/$RUBY_VERSION/$BUNDLE_GEMFILE"
+
+ruby_version=$(ruby -e 'puts RUBY_VERSION')
+major=$(echo "$ruby_version" | cut -d. -f1)
+minor=$(echo "$ruby_version" | cut -d. -f2)
+
+if [ "$major" -lt 2 ] || ([ "$major" -eq 2 ] && [ "$minor" -le 7 ]); then
+  gem install bundler -v 1.17.3
+else
+  gem install bundler
+fi
+
+bundle install
+bundle exec rspec

data/script/testenv

@@ -0,0 +1,6 @@
+#!/bin/bash
+
+set -e
+
+echo "Starting test environment..."
+docker compose up

data/spec/.rubocop.yml

@@ -1,4 +1,4 @@
 inherit_from: ../.rubocop.yml
 
-Metrics/LineLength:
+Layout/LineLength:
   Max: 100

data/spec/integrations/devise_spec.rb

@@ -15,7 +15,7 @@ describe Devise::SessionsController, :type => :request do
   end
 
   def create_user
-    post "/users", prepare_request_params(
+    post "/users", **prepare_request_params(
       "user[email]" => "person@example.com",
       "user[password]" => "secret",
       "user[password_confirmation]" => "secret"
@@ -23,7 +23,7 @@ describe Devise::SessionsController, :type => :request do
   end
 
   def sign_in
-    post "/users/sign_in", prepare_request_params(
+    post "/users/sign_in", **prepare_request_params(
       "user[email]" => "person@example.com",
       "user[password]" => "secret",
       "user[password_confirmation]" => "secret"

data/spec/lib/mongo_session_store/legacy_serialization_spec.rb

@@ -0,0 +1,17 @@
+require "spec_helper"
+
+describe "Legacy session serialization" do
+  let(:session_class) { mongo_orm == "mongoid" ? MongoidStore::Session : MongoStore::Session }
+
+  it "reads raw marshalled strings as well as BSON binary data" do
+    payload = { "nested" => { "count" => 2 }, "tags" => %w[old session] }
+    session = session_class.new
+
+    expect(session.send(:unpack, Marshal.dump(payload))).to eq(payload)
+    expect(session.send(:unpack, BSON::Binary.new(Marshal.dump(payload), :generic))).to eq(payload)
+  end
+
+  it "returns nil when there is no serialized payload" do
+    expect(session_class.new.send(:unpack, nil)).to be_nil
+  end
+end

data/spec/lib/mongo_session_store/serialization_spec.rb

@@ -0,0 +1,36 @@
+require "rails_helper"
+
+describe "Session data serialization" do
+  let(:session_class) { mongo_orm == "mongoid" ? MongoidStore::Session : MongoStore::Session }
+  let(:id) { generate_sid }
+  let(:search) { { "query" => "painting", "admin" => "1" } }
+  let(:parameters) do
+    values = { "search" => search }
+    if Gem.loaded_specs["rails"].version >= Gem::Version.new("7.0")
+      request = ActionDispatch::TestRequest.create("rack.input" => StringIO.new)
+      ActionController::Parameters.new(values, :request => request)
+    else
+      ActionController::Parameters.new(values)
+    end
+  end
+
+  it "round-trips explicitly permitted parameter values without request context" do
+    record = session_class.new(:_id => id)
+    record.data = { "search" => parameters.require(:search).permit(:query).to_h }
+    record.save
+
+    expect(session_class.where(:_id => id).first.data).to eq(
+      "search" => { "query" => "painting" }
+    )
+  end
+
+  if Gem.loaded_specs["rails"].version >= Gem::Version.new("7.0")
+    it "reports serialization errors for raw parameters retaining an input stream" do
+      record = session_class.new(:_id => id)
+      record.data = { "search" => parameters[:search] }
+
+      expect { record.save }.to raise_error(TypeError, /StringIO/)
+      expect(session_class.collection.find(:_id => id).count).to eq(0)
+    end
+  end
+end

data/spec/lib/mongo_session_store/stale_sessions_spec.rb

@@ -0,0 +1,77 @@
+require "spec_helper"
+
+describe ".delete_stale_sessions" do
+  let(:store) { mongo_orm == "mongoid" ? MongoidStore : MongoStore }
+  let(:collection) { store.session_class.collection }
+  let(:cutoff) { Time.utc(2026, 1, 1) }
+
+  it "deletes only sessions last updated strictly before the cutoff" do
+    collection.insert_many([
+      { :_id => "stale", :updated_at => cutoff - 1 },
+      { :_id => "boundary", :updated_at => cutoff },
+      { :_id => "active", :created_at => cutoff - 100, :updated_at => cutoff + 1 },
+      { :_id => "undated" },
+      { :_id => "null-date", :updated_at => nil }
+    ])
+
+    expect(store.delete_stale_sessions(:before => cutoff)).to eq(1)
+    expect(collection.find.map { |doc| doc["_id"] }.sort).to eq(
+      %w[active boundary null-date undated]
+    )
+    expect(store.delete_stale_sessions(:before => cutoff)).to eq(0)
+  end
+
+  it "returns zero for an empty collection" do
+    expect(store.delete_stale_sessions(:before => cutoff)).to eq(0)
+  end
+
+  it "accepts a cutoff with a UTC offset" do
+    collection.insert_one(:_id => "stale", :updated_at => cutoff - 1)
+    local_cutoff = cutoff.getlocal("-05:00")
+
+    expect(store.delete_stale_sessions(:before => local_cutoff)).to eq(1)
+    expect(local_cutoff.utc_offset).to eq(-5 * 60 * 60)
+  end
+
+  it "accepts a Rails time-zone cutoff" do
+    collection.insert_one(:_id => "stale", :updated_at => cutoff - 1)
+    zoned_cutoff = cutoff.in_time_zone("Eastern Time (US & Canada)")
+    expect(store.delete_stale_sessions(:before => zoned_cutoff)).to eq(1)
+  end
+
+  it "rejects invalid cutoffs without deleting sessions" do
+    collection.insert_one(:_id => "stale", :updated_at => cutoff - 1)
+
+    [nil, "2026-01-01", 1].each do |value|
+      expect { store.delete_stale_sessions(:before => value) }.to raise_error(
+        ArgumentError, "before must be a Time"
+      )
+    end
+    expect(collection.find.count).to eq(1)
+  end
+
+  it "uses the configured collection without touching the default collection" do
+    collection.insert_one(:_id => "default", :updated_at => cutoff - 1)
+    original_name = MongoSessionStore.collection_name
+    begin
+      MongoSessionStore.collection_name = "custom_sessions"
+      custom_collection = store.session_class.collection
+      custom_collection.insert_one(:_id => "custom", :updated_at => cutoff - 1)
+
+      expect(store.delete_stale_sessions(:before => cutoff)).to eq(1)
+      expect(custom_collection.find.count).to eq(0)
+    ensure
+      MongoSessionStore.collection_name = original_name
+    end
+    expect(collection.find.count).to eq(1)
+  end
+
+  it "does not suppress database errors" do
+    allow(store.session_class).to receive(:collection)
+      .and_raise(MongoSessionStore::Error, "unavailable")
+
+    expect { store.delete_stale_sessions(:before => cutoff) }.to raise_error(
+      MongoSessionStore::Error, "unavailable"
+    )
+  end
+end

data/spec/lib/mongo_session_store/version_spec.rb

@@ -0,0 +1,8 @@
+require "spec_helper"
+
+describe MongoSessionStore do
+  it "defines a frozen semantic version" do
+    expect(MongoSessionStore::VERSION).to match(/\A\d+\.\d+\.\d+\z/)
+    expect(MongoSessionStore::VERSION).to be_frozen
+  end
+end

data/spec/rails_helper.rb

@@ -1,5 +1,9 @@
 ENV["RAILS_ENV"] = "test"
+require "logger"
+require "active_support"
 rails_version = Gem.loaded_specs["rails"].version.to_s[/^\d\.\d/]
+# Later Rails versions use the same minimal integration app as Rails 6.
+rails_version = "6.0" if Gem.loaded_specs["rails"].version >= Gem::Version.new("6.0")
 if Gem.loaded_specs["rails"].version >= Gem::Version.new("5.2")
   require "active_support/message_encryptor"
 end

data/spec/spec_helper.rb

@@ -1,3 +1,13 @@
+if ENV["COVERAGE"] == "true"
+  require "simplecov"
+  SimpleCov.command_name "RSpec #{Gem.loaded_specs.key?("mongoid") ? "Mongoid" : "Mongo"}"
+  SimpleCov.start do
+    track_files "lib/**/*.rb"
+    add_filter "/spec/"
+  end
+end
+
+require "logger"
 require "mongo"
 require "mongoid" if Gem.loaded_specs["mongoid"]
 require "mongo_session_store"
@@ -27,6 +37,8 @@ RSpec.configure do |config|
   config.before :suite do
     Mongo::Logger.logger.level = ::Logger::INFO
 
+    mongodb_host = ENV["MONGODB_HOST"] || "127.0.0.1"
+    mongodb_port = ENV["MONGODB_PORT"] || "27017"
     if mongo_orm == "mongoid"
       Mongoid.logger.level = Logger::INFO
       Mongoid.configure do |c|
@@ -34,14 +46,14 @@ RSpec.configure do |config|
           "clients" => {
             "default" => {
               "database" => TestDatabaseHelper.test_database_name,
-              "hosts" => ["127.0.0.1:27017"]
+              "hosts" => ["#{mongodb_host}:#{mongodb_port}"]
             }
           }
         )
       end
     else
       MongoStore::Session.database = Mongo::Client.new(
-        ["127.0.0.1:27017"],
+        ["#{mongodb_host}:#{mongodb_port}"],
         :database => TestDatabaseHelper.test_database_name
       )
     end

data/spec/support/apps/rails_6.0_app/config/database.yml

@@ -10,16 +10,22 @@ default: &default
   timeout: 5000
 
 development:
-  <<: *default
+  adapter: sqlite3
+  pool: <%= ENV.fetch("RAILS_MAX_THREADS") { 5 } %>
+  timeout: 5000
   database: db/development.sqlite3
 
 # Warning: The database defined as "test" will be erased and
 # re-generated from your development database when you run "rake".
 # Do not set this db to the same as development or production.
 test:
-  <<: *default
+  adapter: sqlite3
+  pool: <%= ENV.fetch("RAILS_MAX_THREADS") { 5 } %>
+  timeout: 5000
   database: db/test.sqlite3
 
 production:
-  <<: *default
+  adapter: sqlite3
+  pool: <%= ENV.fetch("RAILS_MAX_THREADS") { 5 } %>
+  timeout: 5000
   database: db/production.sqlite3

data/spec/support/apps/rails_6.0_app/config/environments/test.rb

@@ -31,7 +31,7 @@ Rails.application.configure do
   config.action_controller.allow_forgery_protection = false
 
   # Print deprecation notices to the stderr.
-  config.active_support.deprecation = :stderr
+  config.active_support.deprecation = :stderr if Rails.gem_version < Gem::Version.new("7.1")
 
   # Raises error for missing translations.
   # config.action_view.raise_on_missing_translations = true

data/spec/support/helpers/test_database_helper.rb

@@ -6,9 +6,7 @@ module TestDatabaseHelper
     when "mongoid"
       MongoidStore::Session.mongo_client
     when "mongo"
-      Mongo::Client
-        .new(["127.0.0.1:27017"], :database => test_database_name)
-        .database
+      MongoStore::Session.database.database
     end
   end
 

data/spec/support/rack_app.rb

@@ -9,6 +9,8 @@ class MyApp
 end
 
 MyAppWrapped = Rack::Builder.new do |builder|
-  builder.use Rack::Session::Cookie, :secret => "Very secret secret"
+  if defined?(Rack::Session::Cookie)
+    builder.use Rack::Session::Cookie, :secret => "Very secret secret"
+  end
   builder.run MyApp.new
 end