提交 d70ba48c 编写于 作者: S Santiago Pastorino

Revert "Merge pull request #16434 from strzalek/cookies-digest-config-option"

This reverts commit 70597762, reversing
changes made to dde91e9b.

IT BROKE THE BUILD!!!
上级 70597762
* Add `config.action_dispatch.cookies_digest` option for setting custom
digest. The default remains the same - 'SHA1'.
*Łukasz Strzałkowski*
* Extract source code for the entire exception stack trace for * Extract source code for the entire exception stack trace for
better debugging and diagnosis. better debugging and diagnosis.
......
...@@ -90,7 +90,6 @@ class Cookies ...@@ -90,7 +90,6 @@ class Cookies
SECRET_TOKEN = "action_dispatch.secret_token".freeze SECRET_TOKEN = "action_dispatch.secret_token".freeze
SECRET_KEY_BASE = "action_dispatch.secret_key_base".freeze SECRET_KEY_BASE = "action_dispatch.secret_key_base".freeze
COOKIES_SERIALIZER = "action_dispatch.cookies_serializer".freeze COOKIES_SERIALIZER = "action_dispatch.cookies_serializer".freeze
COOKIES_DIGEST = "action_dispatch.cookies_digest".freeze
# Cookies can typically store 4096 bytes. # Cookies can typically store 4096 bytes.
MAX_COOKIE_SIZE = 4096 MAX_COOKIE_SIZE = 4096
...@@ -213,8 +212,7 @@ def self.options_for_env(env) #:nodoc: ...@@ -213,8 +212,7 @@ def self.options_for_env(env) #:nodoc:
secret_token: env[SECRET_TOKEN], secret_token: env[SECRET_TOKEN],
secret_key_base: env[SECRET_KEY_BASE], secret_key_base: env[SECRET_KEY_BASE],
upgrade_legacy_signed_cookies: env[SECRET_TOKEN].present? && env[SECRET_KEY_BASE].present?, upgrade_legacy_signed_cookies: env[SECRET_TOKEN].present? && env[SECRET_KEY_BASE].present?,
serializer: env[COOKIES_SERIALIZER], serializer: env[COOKIES_SERIALIZER]
digest: env[COOKIES_DIGEST]
} }
end end
...@@ -443,10 +441,6 @@ def serializer ...@@ -443,10 +441,6 @@ def serializer
serializer serializer
end end
end end
def digest
@options[:digest] || 'SHA1'
end
end end
class SignedCookieJar #:nodoc: class SignedCookieJar #:nodoc:
...@@ -457,7 +451,7 @@ def initialize(parent_jar, key_generator, options = {}) ...@@ -457,7 +451,7 @@ def initialize(parent_jar, key_generator, options = {})
@parent_jar = parent_jar @parent_jar = parent_jar
@options = options @options = options
secret = key_generator.generate_key(@options[:signed_cookie_salt]) secret = key_generator.generate_key(@options[:signed_cookie_salt])
@verifier = ActiveSupport::MessageVerifier.new(secret, digest: digest, serializer: NullSerializer) @verifier = ActiveSupport::MessageVerifier.new(secret, serializer: NullSerializer)
end end
def [](name) def [](name)
......
...@@ -369,23 +369,6 @@ def test_read_permanent_cookie ...@@ -369,23 +369,6 @@ def test_read_permanent_cookie
assert_equal 'Jamie', @controller.send(:cookies).permanent[:user_name] assert_equal 'Jamie', @controller.send(:cookies).permanent[:user_name]
end end
def test_signed_cookie_using_default_digest
get :set_signed_cookie
cookies = @controller.send :cookies
assert_not_equal 45, cookies[:user_id]
assert_equal 45, cookies.signed[:user_id]
assert_equal 'SHA1', cookies.signed.instance_variable_get(:"@verifier").instance_variable_get(:"@digest")
end
def test_signed_cookie_using_custom_digest
@request.env["action_dispatch.cookies_digest"] = 'SHA256'
get :set_signed_cookie
cookies = @controller.send :cookies
assert_not_equal 45, cookies[:user_id]
assert_equal 45, cookies.signed[:user_id]
assert_equal 'SHA256', cookies.signed.instance_variable_get(:"@verifier").instance_variable_get(:"@digest")
end
def test_signed_cookie_using_default_serializer def test_signed_cookie_using_default_serializer
get :set_signed_cookie get :set_signed_cookie
cookies = @controller.send :cookies cookies = @controller.send :cookies
......
* The `Rails.application.message_verifier` now returns ActiveSupport::MessageVerifier
preconfigured with `:digest` and `:serializer` values set to `config.action_dispatch.cookies_digest`
and `config.action_dispatch.cookies_serializer` accordingly.
*Łukasz Strzałkowski*
* Add `after_bundle` callbacks in Rails templates. Useful for allowing the * Add `after_bundle` callbacks in Rails templates. Useful for allowing the
generated binstubs to be added to version control. generated binstubs to be added to version control.
......
...@@ -200,7 +200,7 @@ def key_generator ...@@ -200,7 +200,7 @@ def key_generator
def message_verifier(verifier_name) def message_verifier(verifier_name)
@message_verifiers[verifier_name] ||= begin @message_verifiers[verifier_name] ||= begin
secret = key_generator.generate_key(verifier_name.to_s) secret = key_generator.generate_key(verifier_name.to_s)
ActiveSupport::MessageVerifier.new(secret, digest: config.action_dispatch.cookies_digest, serializer: config.action_dispatch.cookies_serializer) ActiveSupport::MessageVerifier.new(secret)
end end
end end
...@@ -257,7 +257,6 @@ def env_config ...@@ -257,7 +257,6 @@ def env_config
"action_dispatch.encrypted_cookie_salt" => config.action_dispatch.encrypted_cookie_salt, "action_dispatch.encrypted_cookie_salt" => config.action_dispatch.encrypted_cookie_salt,
"action_dispatch.encrypted_signed_cookie_salt" => config.action_dispatch.encrypted_signed_cookie_salt, "action_dispatch.encrypted_signed_cookie_salt" => config.action_dispatch.encrypted_signed_cookie_salt,
"action_dispatch.cookies_serializer" => config.action_dispatch.cookies_serializer "action_dispatch.cookies_serializer" => config.action_dispatch.cookies_serializer
"action_dispatch.cookies_digest" => config.action_dispatch.cookies_digest
}) })
end end
end end
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册