multi_session 1.1.2 → 1.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a322fc88af7d9e2bd2d78890eb8b1b8c5dcb7a88e507e483307dd5e0e7496c34
-  data.tar.gz: cc6d3967a80f57e985d5e433ee7ce5decbc2d4a6bd6b367a8c2a73e36fa2b1d9
+  metadata.gz: 968316d7433d4cb697127a2eb4259963fdb7906dfbeae0a62fdc2fd8b24c050f
+  data.tar.gz: b0dc08f5da761fde6a3efc921d178dc0ce9f08ece64700670c5376be95f4169c
 SHA512:
-  metadata.gz: 3218f0adb548595c4cae01a439c22438846e6274da0e7cd5f60d01f8fd8a9a6a868b55f739e956d71cde6ff7330bb870d60cc80c921153b2d5e904757e41decf
-  data.tar.gz: 67555d4b3b344dc263f1efa62a311b6b767fd4013ed401b9c15b7aee633e699e952b27ff2f7cafa6e9394bc8518930edb25f1d99fd6c2fa69ec755cba8769e36
+  metadata.gz: 5db43e18b72f05c9ef6531c73cb8e4df7304fb59924cc38653c3c1639e517a1b911a0a2fb1f4abc24feb352a3f765339f173ea701ea19f793375fb9fc74d70e4
+  data.tar.gz: dc1fbfb3cf451ce563c1e8bedb97691b416319dc1b1821970b9488063a06b83ba5694bbd653057e0bdd701ca1cf67687c780d2b60b63f922d6cd1a630338eed2

data/README.md

@@ -70,6 +70,7 @@ For the current version `multi_session`, there these are the configuration value
 | Config option                         | Type                    | Description                                           |
 |---------------------------------------|-------------------------|-------------------------------------------------------|
 | `expires`                             | ActiveSupport::Duration | expiration  period for `multi_session` cookies/values |
+| `domain`                              | String/Symbol/Array     | domain for the `multi_session` cookies                |
 | `authenticated_encrypted_cookie_salt` | String                  | Salt used to derive key for GCM encryption            |
 | `credentials_strategy`                | String/Symbol           | Strategy for managing credentials.                    |
 
@@ -89,6 +90,9 @@ MultiSession.setup do |config|
   # Uncomment to force multi_session cookies to expire after a period of time
   config.expires = 30.minutes
 
+  # Uncomment to change the domain of the multi_session cookies
+  # config.domain = nil
+
   # Salt used to derive key for GCM encryption. Default value is 'multi session authenticated encrypted cookie'
   config.authenticated_encrypted_cookie_salt = 'my multi session salt value'
 

data/lib/generators/templates/multi_session.rb

@@ -2,6 +2,9 @@ MultiSession.setup do |config|
   # Uncomment to force multi_session cookies to expire after a period of time
   # config.expires = 30.minutes
 
+  # Uncomment to change the domain of the multi_session cookies
+  # config.domain = nil
+
   # Salt used to derive key for GCM encryption. Default value is 'multi session authenticated encrypted cookie'
   # config.authenticated_encrypted_cookie_salt = 'multi session authenticated encrypted cookie'
 

data/lib/multi_session.rb

@@ -9,6 +9,9 @@ module MultiSession
   mattr_accessor :expires
   @@expires = nil
 
+  mattr_accessor :domain
+  @@domain = nil
+
   mattr_accessor :credentials_strategy
   @@credentials_strategy = nil
 

data/lib/multi_session/session.rb

@@ -28,8 +28,10 @@ module MultiSession
       end
 
       raise ActionDispatch::Cookies::CookieOverflow if encrypted_and_signed_value.bytesize > ActionDispatch::Cookies::MAX_COOKIE_SIZE
-
-      @cookies[key.to_s] = {value: encrypted_and_signed_value}.merge(MultiSession.expires.present? ? {expires: MultiSession.expires} : {})
+      multi_session_cookie = { value: encrypted_and_signed_value }
+      multi_session_cookie.merge!({ expires: MultiSession.expires}) if MultiSession.expires.present?
+      multi_session_cookie.merge!({ domain: MultiSession.domain }) if MultiSession.domain.present?
+      @cookies[key.to_s] = multi_session_cookie
       nil
     end
 

data/lib/multi_session/version.rb

@@ -1,3 +1,3 @@
 module MultiSession
-  VERSION = '1.1.2'
+  VERSION = '1.1.3'
 end

data/spec/dummy/config/initializers/multi_session.rb

@@ -2,6 +2,9 @@ MultiSession.setup do |config|
   # Uncomment to force multi_session cookies to expire after a period of time
   # config.expires = 30.minutes
 
+  # Uncomment to change the domain of the multi_session cookies
+  # config.domain = nil
+
   # Salt used to derive key for GCM encryption. Default value is 'multi session authenticated encrypted cookie'
   # config.authenticated_encrypted_cookie_salt = 'multi session authenticated encrypted cookie'
 

data/spec/requests/multi_session_spec.rb

@@ -37,4 +37,15 @@ RSpec.describe 'multi_session', type: :request do
 
     expect(aaaa_cookie_string).to include(expire_string)
   end
+
+  it 'can set the domain of session cookies' do
+    domain = '.somedomain.com'
+    MultiSession.setup do |config|
+      config.domain = domain
+    end
+    get '/encrypt_multi_sessions', params: { session_values: { aaaa: 'alpha' }}
+    aaaa_cookie_string = response.headers['Set-Cookie'].split("\n").select{ |str| str.include?('aaaa=')}.first
+    domain_string = "domain=#{domain}"
+    expect(aaaa_cookie_string).to include(domain_string)
+  end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: multi_session
 version: !ruby/object:Gem::Version
-  version: 1.1.2
+  version: 1.1.3
 platform: ruby
 authors:
 - Sean Huber
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2018-11-15 00:00:00.000000000 Z
+date: 2019-01-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails