tenant_check 0.1.0 → 0.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2c3352a7575b13cc9278df4276eb0fe4d0f12e33c458d957ce1e01408c2fd99f
-  data.tar.gz: e86621dc02c63d64d7a4ddf71fe6fe621623d6936c0d210956a51690ab64085b
+  metadata.gz: 1186affdcb84a728e1e4689cee3907c517b0cd7136e02f4d96d7d299b199b11b
+  data.tar.gz: 487dc1e4c9bbd67acb6a6d98759c259dbe5ed1ef92fe9b6e21dc865188184dc5
 SHA512:
-  metadata.gz: eebdbf0719d645fdb208a00d0e46be2a56ba9bfc72f3175431df68bc765865a628d241f81c48b7b1bb973901af3ad32673a54bed6a73f2124ee77ab9e6dd829b
-  data.tar.gz: 168e790052c2d4e0479b94c51c8ab870ee577aa46c7b0dc0c246bf8a827baea0881fc9b52e9a27016bb84da8d19dbacb775a101494b5846252db3fccd25eaf69
+  metadata.gz: 776fbae20f003759b4a007666ef8e477fd50eab16071629182e53bff33c2d4b48fe394250acec492c950767d0f4b79fcabf0c14764a6cae94d4338408a1f8d1f
+  data.tar.gz: 0ddff666811b9d5193751e5eee2de26484fb2d526e8a4ca7d7ca5b197e5bcca99cf2896affff1d1af08a99090c032a1206d81e56f76045261faac5725efef394

data/README.md

@@ -11,7 +11,7 @@ This gem is in an early stage of development.
 Add this line to your application's Gemfile:
 
 ```ruby
-gem 'tenant_check', group: :development
+gem 'tenant_check'
 ```
 
 And then execute:
@@ -64,7 +64,7 @@ current_user.tasks.to_a # devise current_user is safe and the query based on it
 ### temporarlly disable tenant check
 
 ```ruby
-users = TenantCheck.ignored { User.all }
+users = TenantCheck.ignored { User.all.to_a }
 ```
 
 ## Development

data/lib/tenant_check.rb

@@ -101,6 +101,10 @@ module TenantCheck
       notifications.add(notification) if started?
     end
 
+    def notification?
+      !notifications.empty?
+    end
+
     def output_notifications
       notifications.each do |notification|
         logger.warn(notification.message)

data/lib/tenant_check/rack.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require 'action_dispatch'
+
 module TenantCheck
   class Rack
     def initialize(app)
@@ -8,11 +10,61 @@ module TenantCheck
 
     def call(env)
       TenantCheck.start
-      result = @app.call(env)
-      TenantCheck.output_notifications
-      result
+      status, headers, response = @app.call(env)
+      if TenantCheck.notification? && html_headers?(status, headers) && (body = response_body(response))
+        TenantCheck.output_notifications
+        body = append_to_html_body(body, footer_html)
+        content_length = body.bytesize.to_s
+        headers['Content-Length'] = content_length
+        # maintains compatibility with other middlewares
+        if defined?(ActionDispatch::Response::RackBody) && response.is_a?(ActionDispatch::Response::RackBody)
+          ActionDispatch::Response.new(status, headers, [body]).to_a
+        else
+          [status, headers, [body]]
+        end
+      else
+        [status, headers, response]
+      end
     ensure
       TenantCheck.end
     end
+
+    private
+
+    def append_to_html_body(body, content)
+      body = body.dup
+      if body.include?('</body>')
+        position = body.rindex('</body>')
+        body.insert(position, content)
+      else
+        body << content
+      end
+    end
+
+    def footer_html
+      <<~EOS
+        <div ondblclick="this.parentNode.removeChild(this);" style="position: fixed; right: 0; bottom: 0; z-index:9999; font-size: 16px; padding: 8px 32px 8px 8px; background-color: rgb(224, 104, 15); color: white; border-style: solid; border-color: rgb(140, 69, 15); border-width: 2px 0 0 2px; border-radius: 8px 0 0 0; cursor: pointer;">
+          <div onclick='this.parentNode.remove()' style='position:absolute; right: 10px; top: 6px; font-weight: bold; color: white;'>&times;</div>
+          #{TenantCheck.notifications.size} tenant unsafe queries detected!
+        </div>
+      EOS
+    end
+
+    def file?(headers)
+      headers['Content-Transfer-Encoding'] == 'binary' || headers['Content-Disposition']
+    end
+
+    def html_headers?(status, headers)
+      status == 200 &&
+        headers['Content-Type'] &&
+        headers['Content-Type'].include?('text/html') &&
+        !file?(headers)
+    end
+
+    def response_body(response)
+      strings = []
+      response.each { |s| strings << s.to_s }
+      strings.join
+    end
   end
 end

data/lib/tenant_check/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module TenantCheck
-  VERSION = '0.1.0'
+  VERSION = '0.1.1'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: tenant_check
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.1.1
 platform: ruby
 authors:
 - Shunichi Ikegami
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2018-05-07 00:00:00.000000000 Z
+date: 2018-05-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler