ruby_native 0.2.5 → 0.2.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: bc155ab038d88ddb0029ce9072f91ec0728249a388aa3fcc1e8ccc2ce2af7d78
-  data.tar.gz: 150029c5dd6f61b13e0fb0d097bfb61ab2048f259c536fe17048b1908025b716
+  metadata.gz: ad18c6fcb69bcf375a6a44ef5513e47d6ff96dbf1957636d2fc964a9a124a078
+  data.tar.gz: '048a44c3fa9f59016d8dad8f60f2e2d8330a403285ede35541465162eb64c11e'
 SHA512:
-  metadata.gz: f943b32f452f9cc638ae3332cbe62ceeb166cc2ad7e9df9d8272c24836dce4bdfb2f7c3a6e4e897ed7d9cd076bb92626ab3772a9a0ac649869d8d7fb1a4cdf13
-  data.tar.gz: 6988fe9f67885859619b1217ffe86e1bf829fcf0b67996cfd49017a7de4a2337356b9253857479fdc3a2e0d90bf0396c581110c3676c265ec6e51117f99ce77e
+  metadata.gz: 03c531fb7b9739e8744493e41024b6472ad43d43ef287686fec672ab1ddda186c9ad4463d86a4844ce0b2d35f5c1cf6ddf89075c2998e3f8d6d4727be7fcdf77
+  data.tar.gz: dd6f724b78af89ac07c72ea9b5acc898af580a1042d822bab3cf948eb9e577124dbaecbcb43342ff095a890b0055a8152d5a8a1a93a87960e9be86651e51ca12

data/lib/generators/ruby_native/templates/ruby_native.yml

@@ -6,6 +6,7 @@ appearance:
   tint_color: "#007AFF"
   background_color: "#FFFFFF"
   status_bar_color: "#F8F9FA"
+  # edge_to_edge: true  # Let the web view extend behind the status bar (Normal Mode only)
   # Dark mode example (replace the plain strings above):
   # background_color:
   #   light: "#FFFFFF"

data/lib/ruby_native/engine.rb

@@ -32,6 +32,12 @@ module RubyNative
       app.middleware.insert_before ActionDispatch::Cookies, RubyNative::OAuthMiddleware
     end
 
+    initializer "ruby_native.tunnel_cookie_middleware" do |app|
+      if Rails.env.development?
+        app.middleware.insert_before ActionDispatch::Cookies, RubyNative::TunnelCookieMiddleware
+      end
+    end
+
     initializer "ruby_native.routes" do |app|
       app.routes.prepend do
         mount RubyNative::Engine, at: "/native"

data/lib/ruby_native/tunnel_cookie_middleware.rb

@@ -0,0 +1,45 @@
+module RubyNative
+  # Strips the `domain=` attribute from Set-Cookie headers when the request
+  # comes through a Cloudflare tunnel (*.trycloudflare.com).
+  #
+  # Many Rails apps configure `domain: :all, tld_length: 2` on their session
+  # store. Through a tunnel this resolves to `.trycloudflare.com`, a public
+  # suffix domain. Browsers and WKWebView silently reject those cookies,
+  # breaking authentication.
+  #
+  # Removing the domain attribute lets the cookie scope to the exact tunnel
+  # hostname (e.g. `abc-123.trycloudflare.com`) so it persists normally.
+  class TunnelCookieMiddleware
+    TUNNEL_HOST_PATTERN = /\.trycloudflare\.com\z/
+
+    def initialize(app)
+      @app = app
+    end
+
+    def call(env)
+      status, headers, body = @app.call(env)
+
+      if tunnel_request?(env) && headers["set-cookie"]
+        strip_cookie_domain!(headers)
+      end
+
+      [status, headers, body]
+    end
+
+    private
+
+    def tunnel_request?(env)
+      host = env["HTTP_HOST"] || env["SERVER_NAME"] || ""
+      host.match?(TUNNEL_HOST_PATTERN)
+    end
+
+    def strip_cookie_domain!(headers)
+      raw = headers["set-cookie"]
+      cookies = raw.is_a?(Array) ? raw : raw.split("\n")
+
+      headers["set-cookie"] = cookies.map { |cookie|
+        cookie.gsub(/;\s*domain=[^;]*/i, "")
+      }.join("\n")
+    end
+  end
+end

data/lib/ruby_native/version.rb

@@ -1,3 +1,3 @@
 module RubyNative
-  VERSION = "0.2.5"
+  VERSION = "0.2.6"
 end

data/lib/ruby_native.rb

@@ -4,6 +4,7 @@ require "ruby_native/native_version"
 require "ruby_native/native_detection"
 require "ruby_native/inertia_support"
 require "ruby_native/oauth_middleware"
+require "ruby_native/tunnel_cookie_middleware"
 require "ruby_native/engine"
 
 module RubyNative

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: ruby_native
 version: !ruby/object:Gem::Version
-  version: 0.2.5
+  version: 0.2.6
 platform: ruby
 authors:
 - Joe Masilotti
@@ -79,6 +79,7 @@ files:
 - lib/ruby_native/native_detection.rb
 - lib/ruby_native/native_version.rb
 - lib/ruby_native/oauth_middleware.rb
+- lib/ruby_native/tunnel_cookie_middleware.rb
 - lib/ruby_native/version.rb
 homepage: https://github.com/Ruby-Native/gem
 licenses: