oopsie_exceptions 1.1.0 → 1.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a3c1bf7176b541c4c19f09ca56724e8c873e1bae149ac9ff9963a4f4fb4f1156
-  data.tar.gz: 692fd55d89e3235279b1ba98764f1fbeaeab5e11204c3733674f7a8958956262
+  metadata.gz: eeb40f85518ab7f9d4d43e33bb9605206de73f6e3d8fc24979039c39c2c11c02
+  data.tar.gz: e075b4c269916b53dfecd103d7a10ec9ca0b6ce99de3b82c37b391fc386d56cf
 SHA512:
-  metadata.gz: 0c8a3bfd9907819f35ecd979d114e9784daf71ff7c5b2264246782458463c15271a71319208fe5798de1c11178c7bf643e8bcda693124ed74e7f2a50cc25ef17
-  data.tar.gz: 9d4f5168d31b516127abc0afa2e894ec02c28cdf076e82f96d555f81c1e38fb3884d3fbca46307572ce2f9749798cf1ace9c4e2fa6d98a6263908c4a695a14a1
+  metadata.gz: 71d6c2ce97bae33d43f3d0ad1fee09ede56ca47576c11303a98e663e2046f6719fbd309d1429f6ce375956cff33fefa404a61ddbacf51c82df377b5296929820
+  data.tar.gz: 064032a2ec6f0d414bcb24935932a2775a8dbe691ff0b6a1252681bf798b68e347f9e5de8d14fa897d29bca8d22caca262751723343730c62c98eb6c99e15d5d

data/README.md

@@ -90,6 +90,8 @@ end
 
 Each captured exception is enriched with request URL/method/IP/params/headers, the current user (via `context_builder` or `set_context`), server hostname/PID/Ruby version, and a UTC timestamp.
 
+Request context capture is best-effort. If Rack rejects a malformed or truncated request body while OopsieExceptions is collecting params, the exception report is still allowed to continue with `request.params` omitted. Payloads include omission metadata such as `params_omitted` / `params_error_class` or `body_omitted` / `body_error_class` when request enrichment fails.
+
 ## Adding context per-request
 
 If you don't want to use `context_builder`, you can set context from a controller:
@@ -189,6 +191,14 @@ Return `nil` to drop the notification entirely.
 
 ## Upgrading from earlier versions
 
+### Malformed request body handling
+
+Apps that added a local guard around OopsieExceptions request context collection for malformed multipart or truncated request bodies can remove that workaround after upgrading to a gem release that includes best-effort request params/body capture. Until the fixed gem version is deployed in the app, keep the app-local guard in place.
+
+This gem change only prevents OopsieExceptions from turning context enrichment into a new request failure. Production exception groups for the affected app should still be resolved from that app's deploy verification, not from the gem release alone.
+
+### Legacy delivery job cleanup
+
 If you're coming from an older version of the gem that generated `app/jobs/oopsie_exceptions/delivery_job.rb` in your app, **delete that file**. The gem now ships its own `OopsieExceptions::WebhookJob` and the host-app file is obsolete.
 
 ```bash

data/lib/oopsie_exceptions/context.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
-require "rack"
+require "rack/request"
 
 module OopsieExceptions
   module Context
@@ -27,38 +27,63 @@ module OopsieExceptions
         request = Rack::Request.new(env)
         config = OopsieExceptions.configuration
 
-        ctx = {
-          request: {
-            url: request.url,
-            method: request.request_method,
-            ip: request.ip,
-            user_agent: env["HTTP_USER_AGENT"],
-            referer: env["HTTP_REFERER"],
-            request_id: env["action_dispatch.request_id"] || env["HTTP_X_REQUEST_ID"],
-            params: sanitize_params(request.params, config),
-            headers: extract_headers(env, config)
-          }
+        request_context = {
+          url: request.url,
+          method: request.request_method,
+          ip: request.ip,
+          user_agent: env["HTTP_USER_AGENT"],
+          referer: env["HTTP_REFERER"],
+          request_id: env["action_dispatch.request_id"] || env["HTTP_X_REQUEST_ID"],
+          headers: extract_headers(env, config)
         }
 
-        if config.capture_request_body && request.content_type&.include?("application/json")
-          body = request.body.read
-          request.body.rewind
-          ctx[:request][:body] = body[0, 10_000] if body && !body.empty?
-        end
+        request_context.merge!(request_params_context(request, config))
+        request_context.merge!(request_body_context(request, config))
+
+        ctx = {
+          request: request_context
+        }
 
         ctx
       end
 
       private
 
+      def request_params_context(request, config)
+        { params: sanitize_params(request.params, config) }
+      rescue StandardError => error
+        rewind_body(request.body)
+        {
+          params: {},
+          params_omitted: true,
+          params_error_class: error.class.name
+        }
+      end
+
+      def request_body_context(request, config)
+        return {} unless config.capture_request_body
+        return {} unless request.content_type&.include?("application/json")
+
+        body_io = request.body
+        body = body_io.read
+        return {} if body.nil? || body.empty?
+
+        { body: body[0, 10_000] }
+      rescue StandardError => error
+        {
+          body_omitted: true,
+          body_error_class: error.class.name
+        }
+      ensure
+        rewind_body(body_io)
+      end
+
       def sanitize_params(params, config)
         filtered = params.reject { |k, _| k == "controller" || k == "action" }
         filter_keys = config.filter_parameters
         filtered.each_with_object({}) do |(k, v), hash|
-          hash[k] = filter_keys.any? { |f| k.to_s.include?(f) } ? "[FILTERED]" : v
+          hash[k] = filter_keys.any? { |f| k.to_s.include?(f.to_s) } ? "[FILTERED]" : v
         end
-      rescue
-        {}
       end
 
       def extract_headers(env, config)
@@ -66,11 +91,17 @@ module OopsieExceptions
         env.each do |key, value|
           next unless key.start_with?("HTTP_")
           header_name = key.sub("HTTP_", "").split("_").map(&:capitalize).join("-")
-          next if config.filter_headers.any? { |h| h.casecmp(header_name) == 0 }
+          next if config.filter_headers.any? { |h| h.to_s.casecmp(header_name) == 0 }
           headers[header_name] = value
         end
         headers
       end
+
+      def rewind_body(body_io)
+        body_io.rewind if body_io&.respond_to?(:rewind)
+      rescue StandardError
+        nil
+      end
     end
   end
 end

data/lib/oopsie_exceptions/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module OopsieExceptions
-  VERSION = "1.1.0"
+  VERSION = "1.1.1"
 end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: oopsie_exceptions
 version: !ruby/object:Gem::Version
-  version: 1.1.0
+  version: 1.1.1
 platform: ruby
 authors:
 - Troy
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-04-06 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack
@@ -24,11 +23,24 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: minitest
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '5.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '5.0'
 description: Captures unhandled exceptions from web requests and background jobs,
   enriches them with request/user/server context, and delivers structured JSON payloads
   to configurable webhook endpoints. Works with any Rack-based framework; optional
   Rails integration included.
-email:
 executables: []
 extensions: []
 extra_rdoc_files: []
@@ -55,7 +67,6 @@ metadata:
   source_code_uri: https://github.com/theinventor/oopsie_exceptions
   changelog_uri: https://github.com/theinventor/oopsie_exceptions/releases
   rubygems_mfa_required: 'true'
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -70,8 +81,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.3
-signing_key:
+rubygems_version: 3.6.7
 specification_version: 4
 summary: Lightweight exception capture and webhook delivery for Ruby (framework-agnostic)
 test_files: []