Signed-off-by: NPratik Naik <pratiknaik@gmail.com>

Signed-off-by: NJoshua Peek <josh@joshpeek.com>

This mostly affects response.headers['cookie'] for test requests. Use response.cookies instead.

Persistent session identifier support for CookieSessionStore and API compat. with the server side stores [#1591 state:resolved]
Signed-off-by: NJoshua Peek <josh@joshpeek.com>

Decorate responses from Rack Middleware and Rails Metal for the purposes of integration testing. A test for the following Metal:

    class Poller < Rails::Rack::Metal
      def call(env)
        if env["PATH_INFO"] =~ /^\/poller/
          [200, {"Content-Type" => "text/plain"}, "Hello World!"]
        else
          super
        end
      end
    end

might be tested like so:

  class PollerTest < ActionController::IntegrationTest
    test "poller returns hello world" do
      get "/poller"
      assert_response 200
      assert_response :success
      assert_response :ok
      assert_equal "Hello World!", response.body
    end
  end

[#1588 state:committed]
Signed-off-by: NDavid Heinemeier Hansson <david@loudthinking.com>

Do not output an ETag header if response body is blank or when sending files with send_file(... :xsendfile => true) [#1578 state:committed]
Signed-off-by: NDavid Heinemeier Hansson <david@loudthinking.com>

Signed-off-by: NJoshua Peek <josh@joshpeek.com>

Signed-off-by: NJoshua Peek <josh@joshpeek.com>

Signed-off-by: NJoshua Peek <josh@joshpeek.com>

Fix for Integration::Session follow_redirect! headers['location'] bug with Rack [#1555 state:resolved]
Signed-off-by: NJoshua Peek <josh@joshpeek.com>

Silence server backtrace in rescue templates and log files. Also remove some noise from missing template errors.

* Add ActionController::CGIHandler as a backwards compatible CGI wrapper around Rack.
* Also pull failsafe responder into ActionController::Failsafe middleware.

Signed-off-by: NJoshua Peek <josh@joshpeek.com>

Refactor SessionFixationTest and WebServiceTest with IntegrationTest so they are compatible with the Rack interface.

Certain groups of web proxies do not set these values properly.  Notably,
proxies for cell phones, which often do not set the remote IP information
correctly (not surprisingly, since the clients do not have an IP address).

Allowing this to be configurable makes it possible for developers to choose
to ignore this simple spoofing check, when a significant amount of their
traffic would result in false positives anyway.
Signed-off-by: NMichael Koziarski <michael@koziarski.com>

[#1200 state:committed]

Signed-off-by: NMichael Koziarski <michael@koziarski.com>

[#1418 state:committed]

Revert "Super lazy load view paths in development mode (no indexing or caching at all). Switch layout finders to use view path api to take advantage of cache." as it killed dev mode reloading.

This reverts commit 4d910b03.

fixed template recompile issue with previous commit and add some better tests so we can make sure it doesn't happen again

Reinstate "Super lazy load view paths in development mode (no indexing or caching at all). Switch layout finders to use view path api to take advantage of cache." as it killed dev mode reloading."

Revert "Super lazy load view paths in development mode (no indexing or caching at all). Switch layout finders to use view path api to take advantage of cache." as it killed dev mode reloading.

This reverts commit 4d910b03.

Added the option to declare an asset_host as an object that responds to call (see http://github.com/dhh/asset-hosting-with-minimum-ssl for an example) [DHH]

Super lazy load view paths in development mode (no indexing or caching at all). Switch layout finders to use view path api to take advantage of cache.