rack-strip-cookies 2.0.0 → 2.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ee48b2cf41b5f790f375f381c8456ba1f5454dc7dc836cc613c15f8e5e9c6e1b
-  data.tar.gz: cfc890245c466bcde879ab81d82d9aad4a4fe4b7c0b8d4a5a7f8f88155872397
+  metadata.gz: bfb4b59e07b831256a03212bc6219d60ff755a0015a03954d0475e825a0196ee
+  data.tar.gz: f1861fc6961f221c8d08b97ad9900b4988287b5e0f5c714b690f8acafdbb179e
 SHA512:
-  metadata.gz: e7cb64501921d5e02144044e7d1f36bc2bc61f3954b3c4330aa0fd508dab1d7e2753a5746b669746e04e097c329d2f14c044a5d8fc381f7a72968cb9d3f53cd8
-  data.tar.gz: 34b7e75bfebfbf6211580eb9b591f2434383f839bd9cc9363d86affc01d6539e4b8c14790e527d7d6f3cf0dcc1665d31562c8830c7acaa3ccf6788f4ba2ebc25
+  metadata.gz: 8abc1c9d1ba1a874f2f5466c878330b8572ff4a57b5ced4b0051b10a011c457efe66dcca8d561644ee1e84ce898da1678352f7eab8cf3ca43a8e39f0fcab3a73
+  data.tar.gz: 5159458d3994509f959c4d6584290af40a255a40e0b4cc1d7e2aa350eea60f0dd1bc6f70faa450acfdcbcc444fd549389b4dac60d3b62535e9f2e3ef5b8e3e57

data/lib/rack/strip-cookies/version.rb

@@ -1,5 +1,5 @@
 module Rack
   class StripCookies
-    VERSION = "2.0.0"
+    VERSION = "2.1.0"
   end
 end

data/lib/rack/strip-cookies.rb

@@ -1,7 +1,7 @@
 # lib/rack/strip-cookies.rb
 module Rack
   class StripCookies
-    attr_reader :app, :patterns, :invert
+    attr_reader :app, :patterns, :invert, :expose_header
 
     # Initializes the middleware.
     #
@@ -14,6 +14,7 @@ module Rack
     def initialize(app, options = {})
       @app = app
       @invert = options.fetch(:invert, false)
+      @expose_header = options.fetch(:expose_header, false)
       @patterns = compile_patterns(options[:paths] || [])
     end
 
@@ -31,7 +32,8 @@ module Rack
       path = env["PATH_INFO"] || "/"
 
       # Determine if the current path matches any of the compiled patterns.
-      # Each pattern is a regex that represents either an exact match or a wildcard match.
+      # Non-wildcard paths match both the exact path and any descendant path.
+      # Wildcard paths only match descendant paths.
       matched = patterns.any? { |regex| regex.match?(path) }
 
       # Decide whether to strip cookies based on the matching result and the invert flag.
@@ -50,11 +52,13 @@ module Rack
         # This returns the HTTP status, headers, and body of the response.
         status, headers, body = @app.call(env)
 
-        # Remove the 'Set-Cookie' header from the response headers.
-        headers.delete("set-cookie")
+        # Remove any case variant of the 'Set-Cookie' header from the response headers.
+        headers.keys.each do |header_name|
+          headers.delete(header_name) if header_name.to_s.casecmp?("set-cookie")
+        end
 
-        # Add a custom header 'Cookies-Stripped' to indicate that cookies were stripped.
-        headers["cookies-stripped"] = "true"
+        # Expose the stripping decision only when explicitly enabled.
+        headers["cookies-stripped"] = "true" if expose_header
       else
         # If cookies are not to be stripped, simply call the next middleware or application.
         # The original request and response headers remain untouched.
@@ -78,9 +82,12 @@ module Rack
           # Wildcard pattern: "/api/*" -> matches "/api/" and "/api/anything"
           prefix = Regexp.escape(path.chomp("/*"))
           Regexp.new("^#{prefix}/.*$")
+        elsif path == "/"
+          # Root path matches every Rack path.
+          %r{\A/.*\z}
         else
-          # Exact match pattern: "/api" -> matches only "/api"
-          Regexp.new("^#{Regexp.escape(path)}$")
+          # Base path pattern: "/api" -> matches "/api" and "/api/anything"
+          Regexp.new("^#{Regexp.escape(path)}(?:$|/.*)")
         end
       end
     end

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: rack-strip-cookies
 version: !ruby/object:Gem::Version
-  version: 2.0.0
+  version: 2.1.0
 platform: ruby
 authors:
 - Claudio Poli
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-09-16 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rack
@@ -80,7 +79,8 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: 5.18.0
-description: Rack middleware to remove cookies at user-defined paths.
+description: Rack middleware that deletes cookies at designated paths, including support
+  for wildcard patterns for flexible cookie management.
 email:
 - claudio@icorete.ch
 executables: []
@@ -94,7 +94,6 @@ homepage: http://github.com/icoretech/rack-strip-cookies
 licenses:
 - MIT
 metadata: {}
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -102,15 +101,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '0'
+      version: '3.0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.16
-signing_key:
+rubygems_version: 4.0.6
 specification_version: 4
 summary: Rack middleware to remove cookies at user-defined paths.
 test_files: []