uber_login 1.0.0 → 1.0.1

checksums.yaml

@@ -1,15 +1,15 @@
 ---
 !binary "U0hBMQ==":
   metadata.gz: !binary |-
-    NjcyNWVjZmViMmQ3ZTY4MDljODFjYjAxZDc2YmY5YmE4ZDEyNjhiZA==
+    YjcyNWJjYjgwNTZlYTM0OTBiNjk4Y2YyNTQ2YmY1ODRkYmE4MmIxOQ==
   data.tar.gz: !binary |-
-    ZDg0ZTA4MzZkODQ4ZThjN2FkOTYyNjllMTk5MDY1ZmUxZDdlN2NmYg==
+    OTJmNGMwMzQyOTMxNWE4YjlkYmY2MDYzMzc3YjQwNTMzNjVmOWM3Mw==
 SHA512:
   metadata.gz: !binary |-
-    NWFjODkyYjYwN2FlNDFkY2I0NTUwZDZlMmIyMGJhMzRiNTg5MGM1YmY0YzVj
-    M2Y0YTBhY2U0NjNkNThiMDg4MDJlYjM4NjAwNWUxNzcxYTc0N2E1MjdmZDZh
-    NmQzYWNkN2Q0YzhhODNlYmQ2ZmNmYTNmMzZjZGRlMzdhNmNkMTE=
+    ZjM3OTE0Y2VkZjg2MmU3ODcxMjM1MDU5N2M1OGE1YzNiNjhhMzRhMjE1ZDA3
+    Yzc2ZjUwMTc1ZGJlMWRiOGY2NzYzYzgzZmJhYWNkNmM5NDM3NjY3ZDExZjYw
+    MTI2OTc3ZjVmNDg0MTVhNDViODRlOTQ1NDk0MjY3MDk4ZjE5ODA=
   data.tar.gz: !binary |-
-    MTJmMWI1MDhjODQzMWZlNWEzYjk2YzQxMTYxYzc3MGEzNWMyNDM5ZWU2MTc1
-    NDM0ZjQ2OGVhMjgxMzlkN2QyZGJlNThhODNiMDNmOWFjYTI1ZWU5MjVmMWVk
-    ZjlmOWI5N2JjMGJmYmY0MjdmNGNiODkzZjc0YWZkMzg2OGZiZTU=
+    MTBhOTUxMDBkZmE1YjMxMmQ3NTdmNjhhMWYxOGFjZjk3MjE2ZTkxYjM2ZTk5
+    MzQ1MjMzYWIwYzBlYzQyYzAwNDhhMTlkODYwNTVjM2U4OTkxY2YyZjFiNWQy
+    OThkYzJjZDg4OGVmYzViZTYzYzUzNWYwODgxNTBjNWYyZDllYmE=

data/lib/uber_login/cookie_manager.rb

@@ -15,8 +15,8 @@ module UberLogin
     ##
     # Sets the +:uid+ and +:ulogin+ cookies for next login
     def persistent_login(uid, composite)
-      @cookies.permanent[:uid] = uid
-      @cookies.permanent[:ulogin] = TokenEncoder.encode_array composite
+      set_cookie(:uid, uid)
+      set_cookie(:ulogin, TokenEncoder.encode_array(composite))
     end
 
     ##
@@ -40,5 +40,10 @@ module UberLogin
     def login_cookies?
       @cookies[:uid] and @cookies[:ulogin]
     end
+
+    private
+    def set_cookie(key, value)
+      @cookies.permanent[key] = { value: value, httponly: true, secure: @request.ssl? }
+    end
   end
 end

data/lib/uber_login/version.rb

@@ -1,3 +1,3 @@
 module UberLogin
-  VERSION = '1.0.0'
+  VERSION = '1.0.1'
 end

data/spec/spec_helper.rb

@@ -6,6 +6,14 @@ class FakeCookieJar < Hash
   def permanent
     self
   end
+
+  def []=(key, val)
+    if val.class == Hash
+      super(key, val[:value])
+    else
+      super(key, val)
+    end
+  end
 end
 
 class FakeRequest
@@ -16,6 +24,10 @@ class FakeRequest
   def user_agent
     "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 Safari/537.36"
   end
+
+  def ssl?
+    true
+  end
 end
 
 class ApplicationController

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: uber_login
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.1
 platform: ruby
 authors:
 - Francesco Boffa
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2013-12-17 00:00:00.000000000 Z
+date: 2013-12-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: useragent
@@ -24,7 +24,8 @@ dependencies:
     - - ! '>='
       - !ruby/object:Gem::Version
         version: 0.10.0
-description: Login and logout management with secure "remember me" capabilities
+description: Login and logout management with secure "remember me" capabilities and
+  complete session control. You can even force a user to logout!
 email: fra.boffa@gmail.com
 executables: []
 extensions: []