Sha256: 170017bd68069a458a9aa1da95ce947b47ea73572f7fea612bd62d1e81b05fbb
Contents?: true
Size: 1.83 KB
Versions: 6
Compression:
Stored size: 1.83 KB
Contents
module Lotus
module Config
# Cookies configuration
#
# @since 0.3.0
# @api private
class Cookies
# Return the routes for this application
#
# @return [Hash] options for cookies
#
# @since 0.3.0
# @api private
attr_reader :default_options
# Cookies configuration
#
# httponly option enabled by default.
# Prevent attackers to steal cookies via JavaScript,
# Eg. alert(document.cookie) will fail
#
# @param options [Hash, TrueClass, FalseClass] optional cookies options
# @param configuration [Lotus::Configuration] the application configuration
#
# @since 0.3.0
# @api private
#
# @see https://github.com/rack/rack/blob/master/lib/rack/utils.rb #set_cookie_header!
# @see https://www.owasp.org/index.php/HttpOnly
#
# @example Enable cookies with boolean
# module Web
# class Application < Lotus::Application
# configure do
# # ...
# cookies true
# end
# end
# end
#
# @example Enable cookies with options
# module Web
# class Application < Lotus::Application
# configure do
# # ...
# cookies max_age: 300
# end
# end
# end
def initialize(configuration, options = {})
@options = options
@default_options = { httponly: true, secure: configuration.ssl? }
@default_options.merge!(options) if options.is_a?(::Hash)
end
# Return if cookies are enabled
#
# @return [TrueClass, FalseClass] enabled cookies
#
# @since 0.3.0
# @api private
def enabled?
@options.respond_to?(:empty?) ? !@options.empty? : !!@options
end
end
end
end
Version data entries
6 entries across 6 versions & 1 rubygems