same_site_cookie_fix 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 31d1e0e8dabda0f0c00de78e9cf12dcd076b29702a5db6f40469e7831d2d7a2e
+  data.tar.gz: 1d77b4362e2344ac110b1dfac01cb5ac356e033a98bcf835b36b4c2f62670a1c
+SHA512:
+  metadata.gz: db5e35935fe1723c903ce9930b732c7ea36f54a6a5b89d3c4dabfe9b1da8aee2cacd29e052c62efbb3a9503bbc74572ddb870da4198303507b28800f23e83be8
+  data.tar.gz: 92cdf746e1a8796253b66c8dd102382623de1a36eea772b5b51286da18b4c346950872326df58f7932051a78c5eafe67dfe02158267759c3610ed4c55682af55

data/lib/same_site_cookie_fix/middleware.rb

@@ -0,0 +1,58 @@
+module SameSiteCookieFix
+  class Middleware
+    def initialize(app)
+      @app = app
+    end
+
+    def call(env)
+      _status, headers, _body = @app.call(env)
+    ensure
+      user_agent = env['HTTP_USER_AGENT']
+
+      if headers && headers['Set-Cookie'] && !SameSiteCookieFix::Middleware.same_site_none_incompatible?(user_agent)
+        cookies = headers['Set-Cookie'].split("\n").compact
+
+        cookies.each do |cookie|
+          unless cookie.include?("; SameSite")
+            headers['Set-Cookie'] = headers['Set-Cookie'].gsub("#{cookie}", "#{cookie}; secure; SameSite=None\n")
+          end
+        end
+      end
+    end
+
+    def self.same_site_none_incompatible?(user_agent)
+      sniffer = BrowserSniffer.new(user_agent)
+
+      webkit_same_site_bug?(sniffer) || drops_unrecognized_same_site_cookies?(sniffer)
+    rescue
+      true
+    end
+
+    def self.webkit_same_site_bug?(sniffer)
+      (sniffer.os == :ios && sniffer.os_version.match?(/^([0-9]|1[12])[\.\_]/)) ||
+        (sniffer.os == :mac && sniffer.browser == :safari && sniffer.os_version.match?(/^10[\.\_]14/))
+    end
+
+    def self.drops_unrecognized_same_site_cookies?(sniffer)
+      (chromium_based?(sniffer) && sniffer.major_browser_version >= 51 && sniffer.major_browser_version <= 66) ||
+        (uc_browser?(sniffer) && !uc_browser_version_at_least?(sniffer: sniffer, major: 12, minor: 13, build: 2))
+    end
+
+    def self.chromium_based?(sniffer)
+      sniffer.browser_name.downcase.match?(/chrom(e|ium)/)
+    end
+
+    def self.uc_browser?(sniffer)
+      sniffer.user_agent.downcase.match?(/uc\s?browser/)
+    end
+
+    def self.uc_browser_version_at_least?(sniffer:, major:, minor:, build:)
+      digits = sniffer.browser_version.split('.').map(&:to_i)
+      return false unless digits.count >= 3
+
+      return digits[0] > major if digits[0] != major
+      return digits[1] > minor if digits[1] != minor
+      digits[2] >= build
+    end
+  end
+end

data/lib/same_site_cookie_fix/railtie.rb

@@ -0,0 +1,7 @@
+module SameSiteCookieFix
+  class Railtie < Rails::Railtie
+    initializer "same_site_cookie_fix.railtie.configure_rails_initialization" do |app|
+      app.middleware.use SameSiteCookieFix::Middleware
+    end
+  end
+end

data/lib/same_site_cookie_fix/version.rb

@@ -0,0 +1,5 @@
+module SameSiteCookieFix
+
+  VERSION = '0.0.1'.freeze
+
+end

data/lib/same_site_cookie_fix.rb

@@ -0,0 +1,5 @@
+require 'same_site_cookie_fix/version'
+require 'same_site_cookie_fix/railtie' if defined?(Rails)
+
+module SameSiteCookieFix
+end

metadata

@@ -0,0 +1,62 @@
+--- !ruby/object:Gem::Specification
+name: same_site_cookie_fix
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Gavin Ballard
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2021-10-14 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: browser_sniffer
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: Addresses the SameSite=None cookie issue for Disco Rails apps.
+email:
+- gavin@gavinballard.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/same_site_cookie_fix.rb
+- lib/same_site_cookie_fix/middleware.rb
+- lib/same_site_cookie_fix/railtie.rb
+- lib/same_site_cookie_fix/version.rb
+homepage: https://github.com/discolabs/same_site_cookie_fix/
+licenses:
+- None
+metadata: {}
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project:
+rubygems_version: 2.7.6
+signing_key:
+specification_version: 4
+summary: Addresses the SameSite=None cookie issue for Disco Rails apps.
+test_files: []