rack-cors 0.2.9 → 1.0.5

data/test/unit/dsl_test.rb

@@ -1,11 +1,10 @@
 require 'rubygems'
-require 'test/unit'
+require 'minitest/autorun'
 require 'rack/cors'
-require 'shoulda'
 
 
-class DSLTest < Test::Unit::TestCase
-  should 'support explicit config object dsl mode' do
+describe Rack::Cors, 'DSL' do
+  it 'should support explicit config object dsl mode' do
     cors = Rack::Cors.new(Proc.new {}) do |cfg|
       cfg.allow do |allow|
         allow.origins 'localhost:3000', '127.0.0.1:3000' do |source,env|
@@ -17,15 +16,15 @@ class DSLTest < Test::Unit::TestCase
       end
     end
     resources = cors.send :all_resources
-    assert_equal 1, resources.length
-    assert resources.first.allow_origin?('http://localhost:3000')
 
-    assert  resources.first.allow_origin?('http://10.10.10.10:3000',{"USER_AGENT" => "test-agent" })
-    assert !resources.first.allow_origin?('http://10.10.10.10:3001',{"USER_AGENT" => "test-agent" })
-    assert !resources.first.allow_origin?('http://10.10.10.10:3000',{"USER_AGENT" => "other-agent"})
+    resources.length.must_equal 1
+    resources.first.allow_origin?('http://localhost:3000').must_equal true
+    resources.first.allow_origin?('http://10.10.10.10:3000',{"USER_AGENT" => "test-agent" }).must_equal true
+    resources.first.allow_origin?('http://10.10.10.10:3001',{"USER_AGENT" => "test-agent" }).wont_equal true
+    resources.first.allow_origin?('http://10.10.10.10:3000',{"USER_AGENT" => "other-agent"}).wont_equal true
   end
 
-  should 'support implicit config object dsl mode' do
+  it 'should support implicit config object dsl mode' do
     cors = Rack::Cors.new(Proc.new {}) do
       allow do
         origins 'localhost:3000', '127.0.0.1:3000' do |source,env|
@@ -37,15 +36,15 @@ class DSLTest < Test::Unit::TestCase
       end
     end
     resources = cors.send :all_resources
-    assert_equal 1, resources.length
-    assert resources.first.allow_origin?('http://localhost:3000')
 
-    assert  resources.first.allow_origin?('http://10.10.10.10:3000',{"USER_AGENT" => "test-agent" })
-    assert !resources.first.allow_origin?('http://10.10.10.10:3001',{"USER_AGENT" => "test-agent" })
-    assert !resources.first.allow_origin?('http://10.10.10.10:3000',{"USER_AGENT" => "other-agent"})
+    resources.length.must_equal 1
+    resources.first.allow_origin?('http://localhost:3000').must_equal true
+    resources.first.allow_origin?('http://10.10.10.10:3000',{"USER_AGENT" => "test-agent" }).must_equal true
+    resources.first.allow_origin?('http://10.10.10.10:3001',{"USER_AGENT" => "test-agent" }).wont_equal true
+    resources.first.allow_origin?('http://10.10.10.10:3000',{"USER_AGENT" => "other-agent"}).wont_equal true
   end
 
-  should 'support "file://" origin' do
+  it 'should support "file://" origin' do
     cors = Rack::Cors.new(Proc.new {}) do
       allow do
         origins 'file://'
@@ -53,6 +52,18 @@ class DSLTest < Test::Unit::TestCase
       end
     end
     resources = cors.send :all_resources
-    assert resources.first.allow_origin?('file://')
+
+    resources.first.allow_origin?('file://').must_equal true
+  end
+
+  it 'should default credentials option to false' do
+    cors = Rack::Cors.new(Proc.new {}) do
+      allow do
+        origins 'example.net'
+        resource '/', :headers => :any
+      end
+    end
+    resources = cors.send :all_resources
+    resources.first.resources.first.credentials.must_equal false
   end
 end

data/test/unit/insecure.ru

@@ -0,0 +1,8 @@
+require 'rack/cors'
+
+use Rack::Cors do
+  allow do
+    origins '*'
+    resource '/public', credentials: true
+  end
+end

data/test/unit/non_http.ru

@@ -0,0 +1,8 @@
+require 'rack/cors'
+
+use Rack::Cors do
+  allow do
+    origins 'com.company.app'
+    resource '/public'
+  end
+end

data/test/unit/test.ru

@@ -1,17 +1,25 @@
 require 'rack/cors'
 
 #use Rack::Cors, :debug => true, :logger => ::Logger.new(STDOUT) do
+use Rack::Lint
 use Rack::Cors do
   allow do
-    origins 'localhost:3000', '127.0.0.1:3000', /http:\/\/192\.168\.0\.\d{1,3}(:\d+)?/, 'file://'
+    origins 'localhost:3000',
+            '127.0.0.1:3000',
+            /http:\/\/192\.168\.0\.\d{1,3}(:\d+)?/,
+            'file://',
+            /http:\/\/(.*?)\.example\.com/
 
     resource '/get-only', :methods => :get
-    resource '/', :headers => :any
+    resource '/', :headers => :any, :methods => :any
     resource '/options', :methods => :options
     resource '/single_header', :headers => 'x-domain-token'
     resource '/two_headers', :headers => %w{x-domain-token x-requested-with}
     resource '/expose_single_header', :expose => 'expose-test'
     resource '/expose_multiple_headers', :expose => %w{expose-test-1 expose-test-2}
+    resource '/conditional', :methods => :get, :if => proc { |env| !!env['HTTP_X_OK'] }
+    resource '/vary_test', :methods => :get, :vary => %w{ Origin Host }
+    resource '/patch_test', :methods => :patch
     # resource '/file/at/*',
     #     :methods => [:get, :post, :put, :delete],
     #     :headers => :any,
@@ -25,9 +33,15 @@ use Rack::Cors do
     resource '/proc-origin'
   end
 
+  allow do
+    origins -> (source, env) { source.end_with?("10.10.10.10:3000") }
+    resource '/lambda-origin'
+  end
+
   allow do
     origins '*'
     resource '/public'
+    resource '/public/*'
     resource '/public_without_credentials', :credentials => false
   end
 
@@ -40,8 +54,9 @@ use Rack::Cors do
     origins '*'
     resource '/multi-allow-config', :max_age => 300, :credentials => false
   end
-end
 
-map '/' do
-  run Proc.new { |env| [200, {'Content-Type' => 'text/html'}, ['success']] }
+  allow do
+    origins ''
+    resource '/blank-origin'
+  end
 end

metadata

@@ -1,97 +1,118 @@
 --- !ruby/object:Gem::Specification
 name: rack-cors
 version: !ruby/object:Gem::Version
-  version: 0.2.9
+  version: 1.0.5
 platform: ruby
 authors:
 - Calvin Yu
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-11-12 00:00:00.000000000 Z
+date: 2019-11-14 00:00:00.000000000 Z
 dependencies:
+- !ruby/object:Gem::Dependency
+  name: rack
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.6.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.6.0
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: 1.16.0
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 1.16.0
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '1.3'
+        version: '3'
 - !ruby/object:Gem::Dependency
   name: rake
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 12.3.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 12.3.0
 - !ruby/object:Gem::Dependency
-  name: shoulda
+  name: minitest
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 5.11.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 5.11.0
 - !ruby/object:Gem::Dependency
   name: mocha
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.14.0
+        version: 1.6.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.14.0
+        version: 1.6.0
 - !ruby/object:Gem::Dependency
   name: rack-test
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 1.1.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ! '>='
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: '0'
-description: ! 'Middleware that will make Rack-based apps CORS compatible.  Read more
-  here: http://blog.sourcebender.com/2010/06/09/introducin-rack-cors.html.  Fork the
-  project here: http://github.com/cyu/rack-cors'
+        version: 1.1.0
+description: 'Middleware that will make Rack-based apps CORS compatible. Fork the
+  project here: https://github.com/cyu/rack-cors'
 email:
 - me@sourcebender.com
 executables: []
 extensions: []
 extra_rdoc_files: []
 files:
+- ".travis.yml"
+- CHANGELOG.md
 - Gemfile
 - LICENSE.txt
-- README.rdoc
+- README.md
 - Rakefile
 - lib/rack/cors.rb
 - lib/rack/cors/version.rb
@@ -104,8 +125,10 @@ files:
 - test/cors/test.cors.js
 - test/unit/cors_test.rb
 - test/unit/dsl_test.rb
+- test/unit/insecure.ru
+- test/unit/non_http.ru
 - test/unit/test.ru
-homepage: http://github.com/cyu/rack-cors
+homepage: https://github.com/cyu/rack-cors
 licenses:
 - MIT
 metadata: {}
@@ -115,17 +138,16 @@ require_paths:
 - lib
 required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ! '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ! '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.1.9
+rubygems_version: 3.0.6
 signing_key: 
 specification_version: 4
 summary: Middleware for enabling Cross-Origin Resource Sharing in Rack apps
@@ -138,4 +160,6 @@ test_files:
 - test/cors/test.cors.js
 - test/unit/cors_test.rb
 - test/unit/dsl_test.rb
+- test/unit/insecure.ru
+- test/unit/non_http.ru
 - test/unit/test.ru

data/README.rdoc

@@ -1,66 +0,0 @@
-= Rack CORS Middleware
-
-Rack::Cors provides support for Cross-Origin Resource Sharing (CORS) for Rack compatible web applications.  The CORS spec allows web applications to make cross domain AJAX calls without
-using workarounds such as JSONP.  For a thorough write up on CORS, see this blog post:
-
-http://www.nczonline.net/blog/2010/05/25/cross-domain-ajax-with-cross-origin-resource-sharing/
-
-Or for all the gory details, you can read the spec here:
-
-http://www.w3.org/TR/access-control/#simple-cross-origin-request-and-actual-r
-
-
-Install the gem:
-
-  gem install rack-cors
-
-In your Gemfile:
-
-  gem 'rack-cors', :require => 'rack/cors'
-
-
-== Configuration
-
-You configure Rack::Cors by passing a block to the <tt>use</tt> command:
-
-  use Rack::Cors do
-    allow do
-      origins 'localhost:3000', '127.0.0.1:3000',
-              /http:\/\/192\.168\.0\.\d{1,3}(:\d+)?/
-              # regular expressions can be used here
-
-      resource '/file/list_all/', :headers => 'x-domain-token'
-      resource '/file/at/*',
-          :methods => [:get, :post, :put, :delete, :options],
-          :headers => 'x-domain-token',
-          :expose  => ['Some-Custom-Response-Header'],
-          :max_age => 600
-          # headers to expose
-    end
-
-    allow do
-      origins '*'
-      resource '/public/*', :headers => :any, :methods => :get
-    end
-  end
-
-Put your code in "config/application.rb" on your rails application. For example, this will allow
-from any origins on any resource of your application, methods :get, :post and :options.
-
-  module YourApp
-    class Application < Rails::Application
-
-      # ...
-
-      config.middleware.use Rack::Cors do
-        allow do
-          origins '*'
-          resource '*', :headers => :any, :methods => [:get, :post, :options]
-        end
-      end
-      
-    end
-  end
-
-See http://guides.rubyonrails.org/rails_on_rack.html for more details on rack middlewares or
-http://railscasts.com/episodes/151-rack-middleware.