rack-cors 2.0.0 → 2.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6edbdc45ea6ee992d901d2247a525bbc9b5073ad30cbde1ea8de9cf3addb87a2
-  data.tar.gz: 164c53dabece23422babf95ac1ecf108f3e0f44cf8101781ea30df290ff7ddc7
+  metadata.gz: 14eb27e856c7cdd90b79cfc7236f3b71e10cfdcb2e282bb1a93546b8a97a053e
+  data.tar.gz: c9a2d87407a44c7df88129ece2d8ac5b8f5f6c46414b742c762d63cb99ae2278
 SHA512:
-  metadata.gz: 90c845fbb2c197c33dce3902684dc284ea2ad888d2d57d3a62454f4fd6fa3612a2c23d3a1d97394929a44e0dfdff4513ca533d6ff820975f020c482adda35b08
-  data.tar.gz: da1506992c2f78e26c9f045b996843d3ce2af0bcce85425c3af38c53fdd2f240b064e5753a8e86e80b30563b63537b46b1528b05f1d98625e1b65225e5d892dc
+  metadata.gz: e7a4136f89a39be61d5d1c7cdc1d5d4c85a883ee72f9a0f16c13fdd0218918d9c67a379974bae60271f3a7b1e2aebdaf8c187aa65c9e97b4d12427a9c606af60
+  data.tar.gz: a6798527bc3b3463f93d63bb42e901ff11de4512c63e10baf2ccb413526fff0cbee04bd9c2c38025b840c5ce9281fd60cd473d4dd0631a1cb6ba704d7d4d28f0

data/CHANGELOG.md

@@ -1,7 +1,15 @@
 # Change Log
 All notable changes to this project will be documented in this file.
 
-## 2.0.0 - 2022-09-11
+## 2.0.2 - 2024-03-04
+### Changed
+- Fix file permission issues with 2.0.1 release
+
+## 2.0.1 - 2023-02-17
+### Changed
+- Use Rack::Utils::HeaderHash when Rack 2.x is detected
+
+## 2.0.0 - 2023-02-14
 ### Changed
 - Refactored codebase
 - Support declaring custom protocols in origin

data/README.md

@@ -1,4 +1,4 @@
-# Rack CORS Middleware [![Build Status](https://travis-ci.org/cyu/rack-cors.svg?branch=master)](https://travis-ci.org/cyu/rack-cors)
+# Rack CORS Middleware [![Build Status](https://github.com/cyu/rack-cors/actions/workflows/ci.yaml/badge.svg)](https://github.com/cyu/rack-cors/actions)
 
 `Rack::Cors` provides support for Cross-Origin Resource Sharing (CORS) for Rack compatible web applications.
 
@@ -33,18 +33,12 @@ Rails.application.config.middleware.insert_before 0, Rack::Cors do
 end
 ```
 
-NOTE: If you create application with `--api` option, configuration automatically generate in `config/initializers/cors.rb`.
+NOTE: If you create application with `--api` option, configuration is automatically generated in `config/initializers/cors.rb`.
 
 We use `insert_before` to make sure `Rack::Cors` runs at the beginning of the stack to make sure it isn't interfered with by other middleware (see `Rack::Cache` note in **Common Gotchas** section). Basic setup examples for Rails 5 & Rails 6 can be found in the examples/ directory.
 
 See The [Rails Guide to Rack](http://guides.rubyonrails.org/rails_on_rack.html) for more details on rack middlewares or watch the [railscast](http://railscasts.com/episodes/151-rack-middleware).
 
-*Note about Rails 6*: Rails 6 has support for blocking requests from unknown hosts, so origin domains will need to be added there as well.
-
-```ruby
-Rails.application.config.hosts << "product.com"
-```
-
 Read more about it here in the [Rails Guides](https://guides.rubyonrails.org/configuring.html#configuring-middleware)
 
 ### Rack Configuration
@@ -158,3 +152,7 @@ has a custom protocol (`chrome-extension://`, `ionic://`, etc.) simply exclude t
 For example, instead of specifying `chrome-extension://aomjjhallfgjeglblehebfpbcfeobpga` specify `aomjjhallfgjeglblehebfpbcfeobpga` in `origins`.
 
 As of 2.0.0 (currently in RC1), you can specify origins with a custom protocol.
+
+### Rails 6 Host Matching
+
+Rails 6 will block requests from unauthorized hosts, and this issue can be confused as a CORS related error. So in development, if you're making requests using something other than localhost or 127.0.0.1, make sure the server host has been authorized. [More info here](https://guides.rubyonrails.org/configuring.html#actiondispatch-hostauthorization)

data/lib/rack/cors/resource.rb

@@ -66,7 +66,7 @@ module Rack
           'access-control-max-age' => max_age.to_s
         }
         h['access-control-allow-credentials'] = 'true' if credentials
-        h
+        header_proc.call(h)
       end
 
       protected
@@ -106,7 +106,7 @@ module Rack
 
       def compile(path)
         if path.respond_to? :to_str
-          special_chars = %w[. + ( )]
+          special_chars = %w[. + ( ) $]
           pattern =
             path.to_str.gsub(%r{((:\w+)|/\*|[\*#{special_chars.join}])}) do |match|
               case match
@@ -127,6 +127,16 @@ module Rack
           raise TypeError, path
         end
       end
+
+      def header_proc
+        @header_proc ||= begin
+          if defined?(Rack::Headers)
+            ->(h) { h }
+          else
+            ->(h) { Rack::Utils::HeaderHash.new(h) }
+          end
+        end
+      end
     end
   end
 end

data/lib/rack/cors/version.rb

@@ -2,6 +2,6 @@
 
 module Rack
   class Cors
-    VERSION = '2.0.0'
+    VERSION = '2.0.2'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rack-cors
 version: !ruby/object:Gem::Version
-  version: 2.0.0
+  version: 2.0.2
 platform: ruby
 authors:
 - Calvin Yu
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-02-14 00:00:00.000000000 Z
+date: 2024-03-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack
@@ -90,14 +90,14 @@ dependencies:
   name: rack-test
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: 1.1.0
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
         version: 1.1.0
 - !ruby/object:Gem::Dependency
@@ -136,37 +136,20 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- ".rubocop.yml"
-- ".travis.yml"
 - CHANGELOG.md
-- Gemfile
 - LICENSE.txt
 - README.md
-- Rakefile
 - lib/rack/cors.rb
 - lib/rack/cors/resource.rb
 - lib/rack/cors/resources.rb
 - lib/rack/cors/resources/cors_misconfiguration_error.rb
 - lib/rack/cors/result.rb
 - lib/rack/cors/version.rb
-- rack-cors.gemspec
-- test/.rubocop.yml
-- test/cors/expect.js
-- test/cors/mocha.css
-- test/cors/mocha.js
-- test/cors/runner.html
-- test/cors/test.cors.coffee
-- test/cors/test.cors.js
-- test/unit/cors_test.rb
-- test/unit/dsl_test.rb
-- test/unit/insecure.ru
-- test/unit/non_http.ru
-- test/unit/test.ru
 homepage: https://github.com/cyu/rack-cors
 licenses:
 - MIT
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -181,20 +164,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.1.2
-signing_key: 
+rubygems_version: 3.3.7
+signing_key:
 specification_version: 4
 summary: Middleware for enabling Cross-Origin Resource Sharing in Rack apps
-test_files:
-- test/.rubocop.yml
-- test/cors/expect.js
-- test/cors/mocha.css
-- test/cors/mocha.js
-- test/cors/runner.html
-- test/cors/test.cors.coffee
-- test/cors/test.cors.js
-- test/unit/cors_test.rb
-- test/unit/dsl_test.rb
-- test/unit/insecure.ru
-- test/unit/non_http.ru
-- test/unit/test.ru
+test_files: []

data/.rubocop.yml

@@ -1,31 +0,0 @@
----
-
-AllCops:
-  Exclude:
-    - 'examples/**/*'
-
-# Disables
-Layout/LineLength:
-  Enabled: false
-Style/Documentation:
-  Enabled: false
-Metrics/ClassLength:
-  Enabled: false
-Metrics/MethodLength:
-  Enabled: false
-Metrics/BlockLength:
-  Enabled: false
-Style/HashEachMethods:
-  Enabled: false
-Style/HashTransformKeys:
-  Enabled: false
-Style/HashTransformValues:
-  Enabled: false
-Style/DoubleNegation:
-  Enabled: false
-Metrics/CyclomaticComplexity:
-  Enabled: false
-Metrics/PerceivedComplexity:
-  Enabled: false
-Metrics/AbcSize:
-  Enabled: false

data/.travis.yml

@@ -1,13 +0,0 @@
-language: ruby
-sudo: false
-rvm:
-  - 2.3
-  - 2.4
-  - 2.5
-  - 2.6
-  - 2.7
-  - truffleruby-head
-
-script:
-  - bundle exec rubocop
-  - bundle exec rake test

data/Gemfile

@@ -1,8 +0,0 @@
-# frozen_string_literal: true
-
-source 'https://rubygems.org'
-
-# Specify your gem's dependencies in rack-cors.gemspec
-gemspec
-
-gem 'pry-byebug', '~> 3.6.0'

data/Rakefile

@@ -1,22 +0,0 @@
-# frozen_string_literal: true
-
-require 'bundler/gem_tasks'
-
-require 'rake/testtask'
-Rake::TestTask.new(:test) do |test|
-  test.libs << 'lib' << 'test'
-  test.pattern = 'test/**/*_test.rb'
-  test.verbose = true
-end
-
-task default: :test
-
-require 'rdoc/task'
-Rake::RDocTask.new do |rdoc|
-  version = File.exist?('VERSION') ? File.read('VERSION') : ''
-
-  rdoc.rdoc_dir = 'rdoc'
-  rdoc.title = "rack-cors #{version}"
-  rdoc.rdoc_files.include('README*')
-  rdoc.rdoc_files.include('lib/**/*.rb')
-end

data/rack-cors.gemspec

@@ -1,30 +0,0 @@
-# frozen_string_literal: true
-
-lib = File.expand_path('lib', __dir__)
-$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
-require 'rack/cors/version'
-
-Gem::Specification.new do |spec|
-  spec.name          = 'rack-cors'
-  spec.version       = Rack::Cors::VERSION
-  spec.authors       = ['Calvin Yu']
-  spec.email         = ['me@sourcebender.com']
-  spec.description   = 'Middleware that will make Rack-based apps CORS compatible. Fork the project here: https://github.com/cyu/rack-cors'
-  spec.summary       = 'Middleware for enabling Cross-Origin Resource Sharing in Rack apps'
-  spec.homepage      = 'https://github.com/cyu/rack-cors'
-  spec.license       = 'MIT'
-
-  spec.files         = `git ls-files`.split($INPUT_RECORD_SEPARATOR).reject { |f| (f == '.gitignore') || f =~ /^examples/ }
-  spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
-  spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
-  spec.require_paths = ['lib']
-
-  spec.add_dependency 'rack', '>= 2.0.0'
-  spec.add_development_dependency 'bundler', '>= 1.16.0', '< 3'
-  spec.add_development_dependency 'minitest', '~> 5.11.0'
-  spec.add_development_dependency 'mocha', '~> 1.6.0'
-  spec.add_development_dependency 'pry', '~> 0.12'
-  spec.add_development_dependency 'rack-test', '~> 1.1.0'
-  spec.add_development_dependency 'rake', '~> 12.3.0'
-  spec.add_development_dependency 'rubocop', '~> 0.80.1'
-end

data/test/.rubocop.yml

@@ -1,8 +0,0 @@
----
-inherit_from: ../.rubocop.yml
-
-# Disables
-Style/ClassAndModuleChildren:
-  Enabled: false
-Security/Eval:
-  Enabled: false