repost 0.2.8 → 0.2.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0c1eb812466ae1d54e302afadfa2b7576e69495df40f154679a0168aa0e38b36
-  data.tar.gz: a09f449f0856017e620eb9677f19c863ca04518df9f8fa805480f23784658d45
+  metadata.gz: c596318ae45ed6b77e768fc7eb3db94c21af30e4f92878421ac984ea7da664ee
+  data.tar.gz: 990b52812aa4e79247eaf99180535925cd4cf9cbd9a962fdcba96afb8693b47e
 SHA512:
-  metadata.gz: 4e33d7fac875714bfab601362aa4682fca3cb41cc38e893ac44369fa29050a93b2d25ae4919080886bec98e841fb4be1b0a0c05be813f2cf4ab666bf06e12dee
-  data.tar.gz: 540c5cecdabf30b9225af96d0475a305fd5beef07e4d1380fffa82151bed725a62261244d9b710956bca9c209857fe0b3db5b93f6ff98659ef0f944848caf38c
+  metadata.gz: 761da6f4e436e85a1dc62c8446010a8465a18e7584df595b19176b85624a1459a38cda391b7aee2363b26509bcfbd04c15468bd7e0c832edb960d730b0d0d2c5
+  data.tar.gz: ed1c4a2c9350388846f9bafac08aac3439f98fa2802a69d6dc92e53d8a16b463d1823ffd57eee2bee0242f21e4a1818149139689031d91388cadbe666e09584c

data/lib/repost/extend_controller.rb

@@ -1,10 +1,20 @@
 if defined?(Rails)
   class ::ActionController::Base
 
-    def repost(*args)
-      render html: Repost::Senpai.perform(*args).html_safe
+    def repost(url, params: {}, options: {})
+      render html: Repost::Senpai.perform(
+        url,
+        params: params,
+        options: options.reverse_merge(authenticity_token: form_authenticity_token)
+      ).html_safe
     end
 
     alias :redirect_post :repost
+
   end
 end
+
+# Sinatra & Rack Protection
+# TODO
+# defined?(Sinatra::Base) && defined?(Rack::Protection::AuthenticityToken)
+# env&.fetch('rack.session', :csrf)

data/lib/repost/senpai.rb

@@ -1,18 +1,21 @@
 module Repost
   class Senpai < Action
     DEFAULT_SUBMIT_BUTTON_TEXT = 'Continue'
+    DEFAULT_CHARSET = 'UTF-8'
 
     def initialize(url, params: {}, options: {})
-      @url             = url
-      @params          = params
-      @options         = options
-      @method          = options[:method] || :post
-      @form_id         = options[:form_id] || generated_form_id
-      @autosubmit      = options.fetch(:autosubmit, true)
-      @section_classes = options.dig(:decor, :section, :classes)
-      @section_html    = options.dig(:decor, :section, :html)
-      @submit_classes  = options.dig(:decor, :submit, :classes)
-      @submit_text     = options.dig(:decor, :submit, :text) || DEFAULT_SUBMIT_BUTTON_TEXT
+      @url                = url
+      @params             = params
+      @options            = options
+      @method             = options.fetch(:method, :post)
+      @authenticity_token = options.fetch(:authenticity_token, nil)
+      @charset            = options.fetch(:charset, DEFAULT_CHARSET)
+      @form_id            = options.fetch(:form_id, generated_form_id)
+      @autosubmit         = options.fetch(:autosubmit, true)
+      @section_classes    = options.dig(:decor, :section, :classes)
+      @section_html       = options.dig(:decor, :section, :html)
+      @submit_classes     = options.dig(:decor, :submit, :classes)
+      @submit_text        = options.dig(:decor, :submit, :text) || DEFAULT_SUBMIT_BUTTON_TEXT
     end
 
     def perform
@@ -27,23 +30,29 @@ module Repost
     private
 
     attr_reader :url, :params, :options, :method, :form_id, :autosubmit,
-                :section_classes, :section_html, :submit_classes, :submit_text
+                :section_classes, :section_html, :submit_classes,
+                :submit_text, :authenticity_token, :charset
+
+    def form_head
+      "<form id='#{form_id}' action='#{url}' method='#{method}' accept-charset='#{charset}'>"
+    end
 
     def form_body
       inputs = params.map do |key, value|
         "<input type='hidden' name='#{key}' value='#{value}'>"
       end
+      inputs.unshift(csrf_token) if authenticity_token
       inputs.join
     end
 
-    def form_head
-      "<form id='#{form_id}' action='#{url}' method='#{method}'>"
-    end
-
     def form_footer
       "</form>"
     end
 
+    def csrf_token
+      "<input name='authenticity_token' value='#{authenticity_token}' type='hidden'>"
+    end
+
     def no_script
       "<noscript>
         #{submit_section}

data/lib/repost/version.rb

@@ -1,3 +1,3 @@
 module Repost
-  VERSION = "0.2.8"
+  VERSION = "0.2.9"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: repost
 version: !ruby/object:Gem::Version
-  version: 0.2.8
+  version: 0.2.9
 platform: ruby
 authors:
 - YaroslavO
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-07-19 00:00:00.000000000 Z
+date: 2019-08-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -86,7 +86,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.2
+rubygems_version: 3.0.1
 signing_key: 
 specification_version: 4
 summary: Gem implements Redirect using POST method