Class: Eukaliptus::Middleware

Inherits:
Object
  • Object
show all
Defined in:
lib/eukaliptus/middleware.rb

Instance Method Summary collapse

Constructor Details

#initialize(app, options = {}) ⇒ Middleware

Returns a new instance of Middleware.



3
4
5
 
# File 'lib/eukaliptus/middleware.rb', line 3

def initialize(app, options = {})
  @app, @options = app, options
end

Instance Method Details

#call(env) ⇒ Object 



7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
 
# File 'lib/eukaliptus/middleware.rb', line 7

def call(env)
  @request = Request.new(env)

  # Catch and convert POST from facebook
  if @request.facebook?
    env["facebook.original_method"] = env["REQUEST_METHOD"]
    env["REQUEST_METHOD"] = 'GET'
  end

  status, headers, body = @app.call(env)
  @response = Rack::Response.new body, status, headers

  # Fixes IE security bug
  @response.header["P3P"] = 'CP="HONK HONK! http://graeme.per.ly/p3p-policies-are-a-joke"'

  if env['PATH_INFO'] == '/cookie_fix'
    cookie_fix(env)
  else
    @response.finish
  end
end

#cookie_fix(env) ⇒ Object

Get POST params and process it to build up the cookie for FB authentication. Then prepare the response for redirection and breaks the request workflow setting the cookie at the same time. This way Safari and other browsers with extra iframe security gets the cookie set too.



34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
 
# File 'lib/eukaliptus/middleware.rb', line 34

def cookie_fix(env)
  params = @request.params
  
  if params['_session_id']
    session = ActiveSupport::JSON.decode(params['_session_id'])

    unless (@request.cookies['fbs_' + Facebook::APP_ID.to_s].present?)
      session = session.map { |key, value| key.to_s + "=" + value.to_s }.join("&")
      @response.set_cookie('fbs_' + Facebook::APP_ID.to_s, session)
    end
  end

  @response.headers.delete "Content-Type"
  @response.headers.delete "Content-Length"
  @response.headers.delete "X-Cascade"

  if defined?(OmniAuth) and defined?(Devise)
    mappings = Devise.mappings[:user]

    if mappings.controllers.has_key? :omniauth_callbacks
      path = [mappings.path, 'auth', :facebook.to_s, 'callback'].join('/')
      @response.redirect(path + "?#{params['redirect_to'].to_query('redirect_to')}")
    else
      @response.redirect("/?#{params['redirect_to'].to_query('redirect_to')}")
    end
  else
    @response.redirect((params['redirect_to'] ? params['redirect_to'] : '/'))
  end

  [302, @response.headers, ['Cookie Setted']]
end