Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | just kill brittle test | Joshua Peek | 2009-03-24 | 1 | -21/+0 |
| | |||||
* | Better error message to try to figure out why the CI build is failing | Joshua Peek | 2009-03-15 | 1 | -1/+11 |
| | |||||
* | Fix brittle Time.now mock | Joshua Peek | 2009-03-15 | 1 | -16/+4 |
| | |||||
* | reset_session should force a new session id to be generated [#2173] | Joshua Peek | 2009-03-09 | 1 | -16/+24 |
| | |||||
* | Expected cookie value should also be escaped. | moro | 2009-02-21 | 1 | -1/+1 |
| | | | | | | | | Ruby 1.9 compat for test. [#1965 state:committed] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> | ||||
* | Remove space from the test name [#1953 state:resolved] | Mike Gunderloy | 2009-02-12 | 1 | -1/+1 |
| | | | | Signed-off-by: Pratik Naik <pratiknaik@gmail.com> | ||||
* | Update bundled Rack for Ruby 1.9 spec changes | Joshua Peek | 2009-02-07 | 1 | -6/+8 |
| | |||||
* | Temporarily bundle Rack 1.0 prerelease for testing | Joshua Peek | 2009-02-07 | 1 | -4/+4 |
| | |||||
* | Ensure session id is set in session options hash [#1880 state:resolved] | Joshua Peek | 2009-02-06 | 2 | -1/+36 |
| | |||||
* | Deprecation tests for f17c876 [#1801 state:resolved] | Mike Gaffney | 2009-01-29 | 1 | -0/+58 |
| | | | | Signed-off-by: Joshua Peek <josh@joshpeek.com> | ||||
* | Session cookie header should always be set if :expire_after option is specified | Pratik Naik | 2009-01-28 | 1 | -4/+32 |
| | |||||
* | Restore cookie store httponly default to true. Remove extraneous dup of ↵ | Cody Fauser | 2009-01-20 | 1 | -2/+2 |
| | | | | | | options on initialization [#1784 state:resolved] Signed-off-by: Joshua Peek <josh@joshpeek.com> | ||||
* | Fix randomly failing cookie store tests | Frederick Cheung | 2008-12-26 | 1 | -5/+4 |
| | | | | | Marshal.dump(Marshal.load(marshaled_hash)) is not guarenteed to be equal to marshaled_hash because of the lack of ordering of hash | ||||
* | Fix reset_session with lazy cookie stores [#1601 state:resolved] | Matt Bauer | 2008-12-20 | 2 | -1/+46 |
| | | | | Signed-off-by: Joshua Peek <josh@joshpeek.com> | ||||
* | Persistent session identifier support for CookieSessionStore and API compat. ↵ | Lourens Naude | 2008-12-18 | 1 | -2/+24 |
| | | | | | | with the server side stores [#1591 state:resolved] Signed-off-by: Joshua Peek <josh@joshpeek.com> | ||||
* | Switch to Rack based session stores. | Joshua Peek | 2008-12-15 | 2 | -402/+153 |
| | |||||
* | Use autoload instead of explicit requires for ActionController | Joshua Peek | 2008-11-23 | 2 | -6/+0 |
| | |||||
* | Move the cookie store to use the MessageVerifier class. | Michael Koziarski | 2008-11-23 | 1 | -11/+2 |
| | | | | This removes support for ancient cookie-store generated cookies which were double escaped. | ||||
* | Work around ruby 1.9 segfault | Jeremy Kemper | 2008-11-07 | 1 | -0/+1 |
| | |||||
* | Added support for http_only cookies in cookie_store Added unit tests for ↵ | Pelle Braendgaard | 2008-09-17 | 1 | -1/+52 |
| | | | | | | | secure and http_only cookies in cookie_store Signed-off-by: Michael Koziarski <michael@koziarski.com> [#1046 state:committed] | ||||
* | Fix file permissions | Tarmo Tänav | 2008-07-31 | 1 | -0/+0 |
| | | | | Signed-off-by: Joshua Peek <josh@joshpeek.com> | ||||
* | Revert "Lazy load cache and session stores" | David Heinemeier Hansson | 2008-06-12 | 1 | -1/+1 |
| | | | | This reverts commit 19895f087c338d8385dff9d272d30fb87cb10330. | ||||
* | Lazy load cache and session stores | Pratik Naik | 2008-06-10 | 1 | -1/+1 |
| | |||||
* | Don't double-escape cookie store data. Don't split cookie values with ↵ | Rich Cavanaugh | 2008-05-12 | 1 | -2/+14 |
| | | | | | | newlines into an array. [#130 state:resolved] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> | ||||
* | Implement increment/decrement on cache storage engines, using read/write by ↵ | Tobias Lütke | 2008-04-29 | 1 | -3/+2 |
| | | | | default and using atomic command on memcache | ||||
* | Ruby 1.9 compat: cookie store delete sets nil value instead of empty string | Jeremy Kemper | 2008-01-07 | 1 | -1/+1 |
| | | | | git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@8589 5ecf4fe2-1ee6-0310-87b1-e25e094e27de | ||||
* | require abstract_unit directly since test is in load path | Jeremy Kemper | 2008-01-05 | 2 | -2/+2 |
| | | | | git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@8564 5ecf4fe2-1ee6-0310-87b1-e25e094e27de | ||||
* | Make sure that cookie sessions use a secret that is at least 30 chars in ↵ | Michael Koziarski | 2007-11-21 | 1 | -0/+19 |
| | | | | | | length. [Koz] git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@8184 5ecf4fe2-1ee6-0310-87b1-e25e094e27de | ||||
* | Skip memcache tests unless it's installed | Jeremy Kemper | 2007-10-15 | 1 | -0/+2 |
| | | | | git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7893 5ecf4fe2-1ee6-0310-87b1-e25e094e27de | ||||
* | Wrap test with uses_mocha | Jeremy Kemper | 2007-10-14 | 1 | -2/+4 |
| | | | | git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7888 5ecf4fe2-1ee6-0310-87b1-e25e094e27de | ||||
* | Memcached sessions: add session data on initialization; don't silently ↵ | Jeremy Kemper | 2007-10-14 | 1 | -0/+178 |
| | | | | | | discard exceptions; add unit tests. Closes #9823. git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7885 5ecf4fe2-1ee6-0310-87b1-e25e094e27de | ||||
* | Parse url-encoded and multipart requests ourselves instead of delegating to CGI. | Jeremy Kemper | 2007-05-18 | 1 | -4/+3 |
| | | | | git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@6764 5ecf4fe2-1ee6-0310-87b1-e25e094e27de | ||||
* | Shine some sunlight on the CGI extensions. Remove unused CGI#session. | Jeremy Kemper | 2007-05-15 | 1 | -1/+1 |
| | | | | git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@6733 5ecf4fe2-1ee6-0310-87b1-e25e094e27de | ||||
* | Cookie session store: ensure that new sessions doesn't reuse data from a ↵ | Jeremy Kemper | 2007-03-14 | 1 | -0/+13 |
| | | | | | | deleted session in the same request. git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@6424 5ecf4fe2-1ee6-0310-87b1-e25e094e27de | ||||
* | Cookie session store: raise ArgumentError when :session_key is blank. | Jeremy Kemper | 2007-03-13 | 1 | -0/+6 |
| | | | | git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@6415 5ecf4fe2-1ee6-0310-87b1-e25e094e27de | ||||
* | Cookie store: use OpenSSL::HMAC instead of basic hash. Introduce :secret ↵ | Jeremy Kemper | 2007-03-03 | 1 | -21/+49 |
| | | | | | | block and :digest option. git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@6296 5ecf4fe2-1ee6-0310-87b1-e25e094e27de | ||||
* | Cookie store: test that >4K raises CookieOverflow and that unverifiable ↵ | Jeremy Kemper | 2007-03-03 | 1 | -13/+43 |
| | | | | | | cookies are automatically deleted. git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@6294 5ecf4fe2-1ee6-0310-87b1-e25e094e27de | ||||
* | Cookie session store: empty and unchanged sessions don't write a cookie. | Jeremy Kemper | 2007-02-25 | 1 | -1/+15 |
| | | | | git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@6226 5ecf4fe2-1ee6-0310-87b1-e25e094e27de | ||||
* | CGI escape the session cookie. | Jeremy Kemper | 2007-02-22 | 1 | -2/+2 |
| | | | | git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@6200 5ecf4fe2-1ee6-0310-87b1-e25e094e27de | ||||
* | Introduce a cookie-based session store as the Rails default. Sessions ↵ | Jeremy Kemper | 2007-02-21 | 1 | -0/+137 |
typically contain at most a user_id and flash message; both fit within the 4K cookie size limit. A secure hash is included with the cookie to ensure data integrity (a user cannot alter his user_id without knowing the secret key included in the hash). If you have more than 4K of session data or don't want your data to be visible to the user, pick another session store. Cookie-based sessions are dramatically faster than the alternatives. git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@6184 5ecf4fe2-1ee6-0310-87b1-e25e094e27de |