workarea-storefront 3.4.19 → 3.4.20

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 737c47ef892d92d5bb0c542400e303b17e350978b2997659d6b0071556af4339
-  data.tar.gz: b9a792e00a90516e303d3afcfe9d23931f640cef611863407f3d2ce833f23934
+  metadata.gz: fd0377b28b5104980ddcfaab6b94d6f354f186359755f3b1cf661499b7414e30
+  data.tar.gz: 95b5d487a08e783f7ea2d74e4363486ae2ed03f1f1abf2d45ede73324dfbac61
 SHA512:
-  metadata.gz: 763020f58a0312ca1373a338613f24784f928b33992843a9b5f1819a692b09324050878d83ba6a84dfc106edc27b1c88e7d561c1d7cf702005ed133b2fd0fb81
-  data.tar.gz: 24fa35b4e389fd0fab988b79431ceef21a3b3f0df33787eeecfc2fcd72b4465e9d73266cab3912856b22976a4049899ae44037b905f3dd1d209b68367ab7bcab
+  metadata.gz: 5794e7f6adfa4034fc3920131006a87f8d5e8150fd3a92f8565cab7fc6dd795463d5a0c342a96684c1b1bfab7af6442fc83b29212445992c7c50206160bd44ee
+  data.tar.gz: 5d882991a8bff9efbd5ee7064d79bf20350c5b1728c93889f85805c918d2b0a833389f6b26e6ec3bd294456a04ec05a64faf45dff4a248b810713a96c5784d20

data/app/controllers/workarea/storefront/users/logins_controller.rb

@@ -2,6 +2,7 @@ module Workarea
   class Storefront::Users::LoginsController < Storefront::ApplicationController
     before_action :ensure_not_locked, only: :create
     skip_before_action :require_password_changes, only: :destroy
+    skip_before_action :verify_authenticity_token, only: :destroy
 
     def new
       @user = User.new

data/test/integration/workarea/storefront/login_integration_test.rb

@@ -152,6 +152,23 @@ module Workarea
         results = JSON.parse(response.body)
         assert_equal(0, results['cart_quantity'])
       end
+
+      def test_it_doesnt_care_about_csrf_for_logout
+        current_forgery_protection = ActionController::Base.allow_forgery_protection
+
+        post storefront.login_path,
+          params: {
+            email: 'existing-account@workarea.com',
+            password: 'W3bl1nc!'
+          }
+
+        ActionController::Base.allow_forgery_protection = true
+        delete storefront.logout_path
+        assert(response.headers['Set-Cookie'].present?)
+
+      ensure
+        ActionController::Base.allow_forgery_protection = current_forgery_protection
+      end
     end
   end
 end

data/test/system/workarea/storefront/release_browsing_system_test.rb

@@ -74,21 +74,6 @@ module Workarea
         end
         assert(page.has_no_content?('New Taxon'))
       end
-
-      private
-
-      # There is some kind of timing problem around waiting for this iframe that
-      # after a few hours we still can't find. This is a hack to keep this
-      # passing.
-      #
-      # May God have mercy on our souls.
-      #
-      # TODO v3.6
-      # Remove this after we stop using an iframe for the admin toolbar
-      #
-      def wait_for_iframe
-        sleep(0.5)
-      end
     end
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: workarea-storefront
 version: !ruby/object:Gem::Version
-  version: 3.4.19
+  version: 3.4.20
 platform: ruby
 authors:
 - Ben Crouse
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-10-16 00:00:00.000000000 Z
+date: 2019-10-30 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: workarea-core
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.4.19
+        version: 3.4.20
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.4.19
+        version: 3.4.20
 description: Provides user-facing ecommerce storefront functionality for the Workarea
   Commerce Platform.
 email: