Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Gh1215 cookies samesite attr part2 #1220

Merged

Conversation

joshrabinowitz
Copy link
Contributor

Builds on gh1215_cookies_samesite_attr for #1215

@joshrabinowitz
Copy link
Contributor Author

@bigpresh I moved forward with this PR.
Can you help with docs and next steps?
Using this code and using session_same_site: "Strict" in config.yml didn't effect the cookie in my testing.

Copy link
Member

@bigpresh bigpresh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks sane; oddly I don't see the access_lines having 4 requests. I think I'll tweak that test after merging this to just make sure that there is only one request logged - anything more than that is a fail, doesn't matter exactly how many.

@bigpresh
Copy link
Member

bigpresh commented Oct 2, 2020

You say it didn't affect the cookie in your testing? The tests included confirm that it does add the option when requested to.

Anyway, I'll get this merged as it is, then tweak that access_logs test and add some doco etc.

@bigpresh bigpresh marked this pull request as ready for review October 2, 2020 20:27
@bigpresh bigpresh merged commit 92d9931 into PerlDancer:devel Oct 2, 2020
@joshrabinowitz joshrabinowitz deleted the gh1215_cookies_samesite_attr_part2 branch October 3, 2020 18:12
@joshrabinowitz
Copy link
Contributor Author

@bigpresh Maybe I'm configuring it wrong.

Can you show an example of what a config file would look like that sets the same_site attribute?

Also, it looks like configuring this attribute is not documented in this branch? If you show an example as above, I'll submit a doc patch.

@bigpresh
Copy link
Member

bigpresh commented Oct 6, 2020

Yeah, I need to add tests for the session setting (there's tests already for Dancer::Cookie behaving correctly depending on what samesite attribute it gets given), and document it. I'll do that ASAP.

@bigpresh
Copy link
Member

bigpresh commented Oct 6, 2020

Right, doco on the new session_same_site setting added in 89f9ccf and some tests for it in 0edd952 and a new trial release heading to CPAN.

@tangentsoft
Copy link

I've tested this change on my D1 app, and it seems to work. Can we get a release, please?

@bigpresh
Copy link
Member

bigpresh commented Mar 6, 2021

Yeah, it's about time this got out there. I've been meaning to find time to investigate a few test failures on the test release: http://matrix.cpantesters.org/?dist=Dancer%201.3514-TRIAL

I'll try to find some time soon, work, children and home life permitting!

@knutov
Copy link

knutov commented Jan 4, 2022

Only one non critical error about XML left, that test can be disabled, I think.

As for now it's possible to install new version this way:

PERL_CPANM_OPT=" --notest " cpanm [email protected]_03

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants