repost 0.2.8 → 0.3.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0c1eb812466ae1d54e302afadfa2b7576e69495df40f154679a0168aa0e38b36
-  data.tar.gz: a09f449f0856017e620eb9677f19c863ca04518df9f8fa805480f23784658d45
+  metadata.gz: 998c57594b27cb1c140eb6e141b2e64467a5cde407410c58bd3547f3529e7d20
+  data.tar.gz: d7fef86b10e728d49154e6883fdf53659bbbacd0f281283e6ff586f82cc67199
 SHA512:
-  metadata.gz: 4e33d7fac875714bfab601362aa4682fca3cb41cc38e893ac44369fa29050a93b2d25ae4919080886bec98e841fb4be1b0a0c05be813f2cf4ab666bf06e12dee
-  data.tar.gz: 540c5cecdabf30b9225af96d0475a305fd5beef07e4d1380fffa82151bed725a62261244d9b710956bca9c209857fe0b3db5b93f6ff98659ef0f944848caf38c
+  metadata.gz: 4ce51773149c3bb5afc481c415753a46e2136d2ef1e41aa17709028ec24682c95a44a913dddba3ea20c06a15bb201384478ab6cac42cb1f41eba97316d35e875
+  data.tar.gz: 97a6ab774d780fbe9cf238ee6172764adbc10d6dd6b0282f3c8950e967f413b560cb4852179d419c27d62dc1dd5ee542c66108864d90444902388a8c8235af64

data/lib/repost/extend_controller.rb

@@ -1,10 +1,23 @@
-if defined?(Rails)
-  class ::ActionController::Base
+if defined?(Rails) && defined?(ActiveSupport)
+  ActiveSupport.on_load(:action_controller) do
+    class ::ActionController::Base
 
-    def repost(*args)
-      render html: Repost::Senpai.perform(*args).html_safe
-    end
+      def repost(url, params: {}, options: {})
+        authenticity_token = form_authenticity_token if ['auto', :auto].include?(options[:authenticity_token])
+        render html: Repost::Senpai.perform(
+          url,
+          params: params,
+          options: options.merge({authenticity_token: authenticity_token}.compact)
+        ).html_safe
+      end
+
+      alias :redirect_post :repost
 
-    alias :redirect_post :repost
+    end
   end
 end
+
+# Sinatra & Rack Protection
+# TODO
+# defined?(Sinatra::Base) && defined?(Rack::Protection::AuthenticityToken)
+# env&.fetch('rack.session', :csrf)

data/lib/repost/senpai.rb

@@ -1,18 +1,21 @@
 module Repost
   class Senpai < Action
     DEFAULT_SUBMIT_BUTTON_TEXT = 'Continue'
+    DEFAULT_CHARSET = 'UTF-8'
 
     def initialize(url, params: {}, options: {})
-      @url             = url
-      @params          = params
-      @options         = options
-      @method          = options[:method] || :post
-      @form_id         = options[:form_id] || generated_form_id
-      @autosubmit      = options.fetch(:autosubmit, true)
-      @section_classes = options.dig(:decor, :section, :classes)
-      @section_html    = options.dig(:decor, :section, :html)
-      @submit_classes  = options.dig(:decor, :submit, :classes)
-      @submit_text     = options.dig(:decor, :submit, :text) || DEFAULT_SUBMIT_BUTTON_TEXT
+      @url                = url
+      @params             = params
+      @options            = options
+      @method             = options.fetch(:method, :post)
+      @authenticity_token = options.fetch(:authenticity_token, nil)
+      @charset            = options.fetch(:charset, DEFAULT_CHARSET)
+      @form_id            = options.fetch(:form_id, generated_form_id)
+      @autosubmit         = options.fetch(:autosubmit, true)
+      @section_classes    = options.dig(:decor, :section, :classes)
+      @section_html       = options.dig(:decor, :section, :html)
+      @submit_classes     = options.dig(:decor, :submit, :classes)
+      @submit_text        = options.dig(:decor, :submit, :text) || DEFAULT_SUBMIT_BUTTON_TEXT
     end
 
     def perform
@@ -27,23 +30,39 @@ module Repost
     private
 
     attr_reader :url, :params, :options, :method, :form_id, :autosubmit,
-                :section_classes, :section_html, :submit_classes, :submit_text
+                :section_classes, :section_html, :submit_classes,
+                :submit_text, :authenticity_token, :charset
+
+    def form_head
+      "<form id='#{form_id}' action='#{url}' method='#{method}' accept-charset='#{charset}'>"
+    end
 
     def form_body
       inputs = params.map do |key, value|
-        "<input type='hidden' name='#{key}' value='#{value}'>"
+        form_input(key, value)
       end
+      inputs.unshift(csrf_token) if authenticity_token
       inputs.join
     end
 
-    def form_head
-      "<form id='#{form_id}' action='#{url}' method='#{method}'>"
+    def form_input(key, value)
+      if value.is_a?(Hash)
+        value.map do |inner_key, inner_value|
+          form_input("#{key}[#{inner_key}]", inner_value)
+        end.join
+      else
+        "<input type='hidden' name='#{key}' value='#{value}'>"
+      end
     end
 
     def form_footer
       "</form>"
     end
 
+    def csrf_token
+      "<input name='authenticity_token' value='#{authenticity_token}' type='hidden'>"
+    end
+
     def no_script
       "<noscript>
         #{submit_section}

data/lib/repost/version.rb

@@ -1,3 +1,3 @@
 module Repost
-  VERSION = "0.2.8"
+  VERSION = "0.3.3"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: repost
 version: !ruby/object:Gem::Version
-  version: 0.2.8
+  version: 0.3.3
 platform: ruby
 authors:
 - YaroslavO
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-07-19 00:00:00.000000000 Z
+date: 2020-06-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -30,14 +30,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: '13.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '10.0'
+        version: '13.0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -86,7 +86,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.2
+rubygems_version: 3.0.8
 signing_key: 
 specification_version: 4
 summary: Gem implements Redirect using POST method