rack-attack 4.1.0 → 4.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 459c5b823f0b03b1d839e5577d1d57fc14332d2c
-  data.tar.gz: e8e15fe0e7619b07a9710160cd429dab4499f6c1
+  metadata.gz: 5fcafc0f62e4bc044a43ebff9f20d2059db798be
+  data.tar.gz: 19ef91c505bac94a8e9e7cb0e9e672ce2c3f6aa7
 SHA512:
-  metadata.gz: 67aad493c5a2b719de12f17a099e9e3ffabfe32fb33ba2d11b9c8149918a78e300fad9c56b786fcca2e328f898a022f0da158becf81304eba42928f1119a5f74
-  data.tar.gz: 4cc797bcb7a7e88fe7b9df2c016b6aeb766dc71007d8124b3d3cd4b1e7da4e6d0695de0465f21afc798aafc81f0b6ac3dbe5f8cdc4f05e856bca49a69e49ce70
+  metadata.gz: 51e6cbf5836d2edef0186e310eadc05ab859db5ba03bc3243250e9c0e739961d4a58c96021db8a0966afaa9b94cbf23e43cffb6689e4e6902b04170a575af6ab
+  data.tar.gz: afd3639047fe6ac3c6e749d1efc1ceccd0d6100a9ae43d4947d48f09e4af2df48b94d66e879551d8ff6ccd1260467d5d5ad90604f0d942f0d9b61a5ce78cd71b

data/README.md

@@ -68,7 +68,7 @@ The algorithm is actually more concise in code: See [Rack::Attack.call](https://
 
 ```ruby
 def call(env)
-  req = Rack::Request.new(env)
+  req = Rack::Attack::Request.new(env)
 
   if whitelisted?(req)
     @app.call(env)
@@ -83,6 +83,10 @@ def call(env)
 end
 ```
 
+Note: `Rack::Attack::Request` is just a subclass of `Rack::Attack` so that you
+can cleanly monkey patch helper methods onto the
+[request object](https://github.com/kickstarter/rack-attack/blob/master/lib/rack/attack/request.rb).
+
 ## About Tracks
 
 `Rack::Attack.track` doesn't affect request processing. Tracks are an easy way to log and measure requests matching arbitrary attributes.
@@ -109,7 +113,7 @@ end
 ```ruby
 # Block requests from 1.2.3.4
 Rack::Attack.blacklist('block 1.2.3.4') do |req|
-  # Request are blocked if the return value is truthy
+  # Requests are blocked if the return value is truthy
   '1.2.3.4' == req.ip
 end
 

data/lib/rack/attack/cache.rb

@@ -16,7 +16,8 @@ module Rack
 
       def count(unprefixed_key, period)
         epoch_time = Time.now.to_i
-        expires_in = period - (epoch_time % period)
+        # Add 1 to expires_in to avoid timing error: http://git.io/i1PHXA
+        expires_in = period - (epoch_time % period) + 1
         key = "#{prefix}:#{(epoch_time/period).to_i}:#{unprefixed_key}"
         do_count(key, expires_in)
       end

data/lib/rack/attack/request.rb

@@ -1,3 +1,16 @@
+# Rack::Attack::Request is the same as ::Rack::Request by default.
+#
+# This is a safe place to add custom helper methods to the request object
+# through monkey patching:
+#
+#   class Rack::Attack::Request < ::Rack::Request
+#     def localhost?
+#       ip == "127.0.0.1"
+#     end
+#   end
+#
+#   Rack::Attack.whitelist("localhost") {|req| req.localhost? }
+#
 module Rack
   class Attack
     class Request < ::Rack::Request

data/lib/rack/attack/version.rb

@@ -1,5 +1,5 @@
 module Rack
   class Attack
-    VERSION = '4.1.0'
+    VERSION = '4.1.1'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rack-attack
 version: !ruby/object:Gem::Version
-  version: 4.1.0
+  version: 4.1.1
 platform: ruby
 authors:
 - Aaron Suggs
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2014-05-22 00:00:00.000000000 Z
+date: 2014-09-11 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack