sinatra-portier 2.0.1 → 2.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 31afe71da2eac370eaa964127e62202abf4917c535e7309d317e8e089476a834
-  data.tar.gz: b9bbcb6d954ba8e0653bf277d52df97333b25ac26ea5e5e64608b70067c2b97e
+  metadata.gz: 642765d420d438014584936cf81a6b0d837e8d0121063a20103360a042cdbc7b
+  data.tar.gz: 917725a06011719d6e6cf490772222d939d3a050c80a433e9de52adee903f669
 SHA512:
-  metadata.gz: 30d0daa34b639d24fb2b0cc6dc71bf693bd6a702ddab6d811e8742116edd13e6470f3c2814c84b41dda9515cb0459224a9268b9bc920a84bfee42c1b5d5c0918
-  data.tar.gz: a90b89b5e2263fe61507ea7f055962218d5f24821ac7b1af96caa8e2f504cf0fddb19720bc0104584531670362d37ec07ce469e39aad733e988df1d21bf5c8fd
+  metadata.gz: 35d28839424d126f05eda54d752357d290e4bbcba7aa7f45de5bd9464f2756abe65e55e540851e1e71f7afd2693e9a003c87a6934b9c167df0e455bf9b098f1f
+  data.tar.gz: b549f301831e584ab7ff45e4afe85547d75c2de6e287a9922b080fa0d20e0e1acee83146d45188cfca186c6fe4a99df55433af987910aeac6e133094b85124ca

data/README.md

@@ -1,4 +1,6 @@
-Sinatra plugin that allows authentication against portier, the successor for [Persona](https://login.persona.org/about). Like Persona, this lets you verify the email identity of a user.
+Sinatra plugin that allows authentication against portier, the successor for
+[Persona](https://github.com/mozilla/persona). Like Persona, this lets you verify the email
+identity of a user.
 
 To be a drop-in replacement, the code keeps using the browserid namespace.
 
@@ -6,7 +8,8 @@ To be a drop-in replacement, the code keeps using the browserid namespace.
 
 To learn more, [read about portier](https://portier.github.io/).
 
-Note that logins are not done from within a form on your site -- you provide a login form, and that will start up the login flow and redirect back to your main page.
+Note that logins are not done from within a form on your site -- you provide a login form, and that
+will start up the login flow and redirect back to your main page.
 
 ## How to get started
 
@@ -66,6 +69,21 @@ Available sinatra settings:
  * <tt>:browserid_url</tt>: If you're using an alternate auth provider
   other than https://broker.portier.io
  * <tt>:browserid_login_url</tt>: URL users get redirected to when the
-  <tt>authorize!(redirect: nil)</tt> helper is called and a user is not logged in. `redirect` is an optional parameter to set the redirect target on the function call instead.
+  <tt>authorize!(redirect: nil)</tt> helper is called and a user is not logged in. `redirect` is an
+  optional parameter to set the redirect target on the function call instead.
  * <tt>:browserid_button_class</tt>: Css class of the login button
  * <tt>:browserid_button_text</tt>: Text of the login button
+
+## Multiprocess environment
+
+To use this gem with a multiprocess app server (like when puma got started with `-w n` and n > 1),
+you can use memcached. Install the `dalli` gem with a working memcached server.
+
+Background: Originally, this gem used the session to store a nonce whenever a user was sent off to
+the broker. However, in some server or browser configurations that session was reset when the user
+came back (see https://github.com/sinatra/sinatra/issues/1742). As a workaround a local cache is
+used that was initially only stored in memory - but this wasn't shared over multiple processes in
+at least one test environment. The memcached server is a solution for that, as its content does get
+shared over multiple processes.
+
+To be extended in future iterations.

data/lib/sinatra/browserid.rb

@@ -19,11 +19,19 @@ require 'moneta'
 module Sinatra
     module BrowserID
 
-        # Init an in-memory cache via the cachy gem. We use this
+        # Init an cache via the cachy gem. We use this
         # instead of the session because of dropped sessions
         # after redirects, see https://github.com/sinatra/sinatra/issues/1742.
-        Cachy.cache_store = Moneta.new(:Memory, expires: 600) # 10 minutes
+        begin
+            # To avoid issues when the outer server is run in multiprocess mode (like puma -w), we
+            # offer the option here to use a cache backend that will remain consistent over
+            # processes. Currently dalli for memcached, can be expanded.
+            require 'dalli'
+            Cachy.cache_store = Moneta.new(:Memcached, expires: 600)
+        rescue LoadError
+            Cachy.cache_store = Moneta.new(:Memory, expires: 600) # 10 minutes
                                                               # We need to set a global :expires here because of https://github.com/grosser/cachy/issues/7
+        end
     
         def self.registered(app)
             app.helpers BrowserID::Helpers

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: sinatra-portier
 version: !ruby/object:Gem::Version
-  version: 2.0.1
+  version: 2.1.1
 platform: ruby
 authors:
 - Pete Fritchman
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-11-22 00:00:00.000000000 Z
+date: 2024-08-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: sinatra
@@ -142,7 +142,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.10
+rubygems_version: 3.5.11
 signing_key:
 specification_version: 4
 summary: Sinatra extension for user authentication with portier