diff -Nru libplack-middleware-session-perl-0.30/Build.PL libplack-middleware-session-perl-0.32/Build.PL --- libplack-middleware-session-perl-0.30/Build.PL 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/Build.PL 2019-02-26 21:36:22.000000000 +0000 @@ -1,7 +1,7 @@ -# This Build.PL for Plack-Middleware-Session was generated by Dist::Zilla::Plugin::ModuleBuildTiny 0.009. +# This Build.PL for Plack-Middleware-Session was generated by Dist::Zilla::Plugin::ModuleBuildTiny 0.015. use strict; use warnings; use 5.006; -use Module::Build::Tiny 0.039; +use Module::Build::Tiny 0.034; Build_PL(); diff -Nru libplack-middleware-session-perl-0.30/Changes libplack-middleware-session-perl-0.32/Changes --- libplack-middleware-session-perl-0.30/Changes 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/Changes 2019-02-26 21:36:22.000000000 +0000 @@ -1,5 +1,12 @@ Revision history for Perl extension Plack::Middleware::Session +0.32 2019-02-26 14:36:19 MST + - Fix dependency for Cookie::Baker + +0.31 2019-02-26 12:01:00 MST + - Documentation fix + - Support samesite cookie attributes #42 + 0.30 2015-03-02 10:24:38 PST - Fix VERSION diff -Nru libplack-middleware-session-perl-0.30/cpanfile libplack-middleware-session-perl-0.32/cpanfile --- libplack-middleware-session-perl-0.30/cpanfile 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/cpanfile 2019-02-26 21:36:22.000000000 +0000 @@ -1,5 +1,5 @@ requires 'Plack' => '0.9910'; -requires 'Cookie::Baker' => '0'; +requires 'Cookie::Baker' => '0.10'; # for session ID gen requires 'Digest::SHA1' => '0'; diff -Nru libplack-middleware-session-perl-0.30/debian/changelog libplack-middleware-session-perl-0.32/debian/changelog --- libplack-middleware-session-perl-0.30/debian/changelog 2018-01-02 19:48:30.000000000 +0000 +++ libplack-middleware-session-perl-0.32/debian/changelog 2019-03-01 16:39:26.000000000 +0000 @@ -1,3 +1,20 @@ +libplack-middleware-session-perl (0.32-1) unstable; urgency=medium + + * Team upload. + + [ Salvatore Bonaccorso ] + * Update Vcs-* headers for switch to salsa.debian.org + + [ gregor herrmann ] + * Import upstream version 0.32. + * Refresh debian/patches/switch-to-digest-sha.patch (fuzz). + * Make (build) dependency on libcookie-baker-perl versioned. + * Remove unneeded version constraint from libdigest-hmac-perl. + * Add new build dependency on libyaml-perl. + * Declare compliance with Debian Policy 4.3.0. + + -- gregor herrmann Fri, 01 Mar 2019 17:39:26 +0100 + libplack-middleware-session-perl (0.30-2) unstable; urgency=medium [ Salvatore Bonaccorso ] diff -Nru libplack-middleware-session-perl-0.30/debian/control libplack-middleware-session-perl-0.32/debian/control --- libplack-middleware-session-perl-0.30/debian/control 2018-01-02 19:48:30.000000000 +0000 +++ libplack-middleware-session-perl-0.32/debian/control 2019-03-01 16:39:26.000000000 +0000 @@ -7,25 +7,26 @@ Build-Depends: debhelper (>= 11), libmodule-build-tiny-perl Build-Depends-Indep: libclass-dbi-sqlite-perl, - libcookie-baker-perl, - libdigest-hmac-perl (>= 1.03), + libcookie-baker-perl (>= 0.10), + libdigest-hmac-perl, libhttp-cookies-perl, libplack-perl, libtest-fatal-perl, libtest-requires-perl, libwww-perl, + libyaml-perl, perl -Standards-Version: 4.1.3 -Vcs-Browser: https://anonscm.debian.org/cgit/pkg-perl/packages/libplack-middleware-session-perl.git -Vcs-Git: https://anonscm.debian.org/git/pkg-perl/packages/libplack-middleware-session-perl.git +Standards-Version: 4.3.0 +Vcs-Browser: https://salsa.debian.org/perl-team/modules/packages/libplack-middleware-session-perl +Vcs-Git: https://salsa.debian.org/perl-team/modules/packages/libplack-middleware-session-perl.git Homepage: https://metacpan.org/release/Plack-Middleware-Session Package: libplack-middleware-session-perl Architecture: all Depends: ${misc:Depends}, ${perl:Depends}, - libcookie-baker-perl, - libdigest-hmac-perl (>= 1.03), + libcookie-baker-perl (>= 0.10), + libdigest-hmac-perl, libplack-perl Description: Perl module for Plack middleware session management Plack::Middleware::Session provides Plack Middleware diff -Nru libplack-middleware-session-perl-0.30/debian/patches/switch-to-digest-sha.patch libplack-middleware-session-perl-0.32/debian/patches/switch-to-digest-sha.patch --- libplack-middleware-session-perl-0.30/debian/patches/switch-to-digest-sha.patch 2015-07-13 20:34:59.000000000 +0000 +++ libplack-middleware-session-perl-0.32/debian/patches/switch-to-digest-sha.patch 2019-03-01 16:39:26.000000000 +0000 @@ -2,12 +2,12 @@ Forwarded: https://github.com/stevan/plack-middleware-session/pull/18/files Author: Dave Walker (Daviey) Reviewed-by: gregor herrmann -Last-Update: 2015-07-11 +Last-Update: 2019-03-01 --- a/lib/Plack/Session/State.pm +++ b/lib/Plack/Session/State.pm @@ -5,7 +5,7 @@ - our $VERSION = '0.30'; + our $VERSION = '0.32'; our $AUTHORITY = 'cpan:STEVAN'; -use Digest::SHA1 (); diff -Nru libplack-middleware-session-perl-0.30/lib/Plack/Middleware/Session.pm libplack-middleware-session-perl-0.32/lib/Plack/Middleware/Session.pm --- libplack-middleware-session-perl-0.30/lib/Plack/Middleware/Session.pm 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/lib/Plack/Middleware/Session.pm 2019-02-26 21:36:22.000000000 +0000 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.30'; +our $VERSION = '0.32'; our $AUTHORITY = 'cpan:STEVAN'; use Plack::Util; @@ -253,7 +253,7 @@ =item I -If set to a true value, forces the session identifier to change. This +If set to a true value, forces the session identifier to change (rotate). This should always be done after logging in, to prevent session fixation attacks from subdomains; see L @@ -266,7 +266,7 @@ =item I If set to a true value, no changes made to the session in this request -will be saved to the store. Either L and I take +will be saved to the store. Either L and L take precedence over this, as both need to update the session store. =item I diff -Nru libplack-middleware-session-perl-0.30/lib/Plack/Session/Cleanup.pm libplack-middleware-session-perl-0.32/lib/Plack/Session/Cleanup.pm --- libplack-middleware-session-perl-0.30/lib/Plack/Session/Cleanup.pm 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/lib/Plack/Session/Cleanup.pm 2019-02-26 21:36:22.000000000 +0000 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.30'; +our $VERSION = '0.32'; our $AUTHORITY = 'cpan:STEVAN'; sub new { diff -Nru libplack-middleware-session-perl-0.30/lib/Plack/Session/State/Cookie.pm libplack-middleware-session-perl-0.32/lib/Plack/Session/State/Cookie.pm --- libplack-middleware-session-perl-0.30/lib/Plack/Session/State/Cookie.pm 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/lib/Plack/Session/State/Cookie.pm 2019-02-26 21:36:22.000000000 +0000 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.30'; +our $VERSION = '0.32'; our $AUTHORITY = 'cpan:STEVAN'; use parent 'Plack::Session::State'; @@ -15,6 +15,7 @@ expires secure httponly + samesite ]; sub get_session_id { @@ -31,6 +32,7 @@ $options{domain} = $self->domain if !exists $options{domain} && defined $self->domain; $options{secure} = $self->secure if !exists $options{secure} && defined $self->secure; $options{httponly} = $self->httponly if !exists $options{httponly} && defined $self->httponly; + $options{samesite} = $self->samesite if !exists $options{samesite} && defined $self->samesite; if (!exists $options{expires} && defined $self->expires) { @@ -102,7 +104,7 @@ The C<%params> can include I, I, I, I, and I options, as well as all the options accepted by -L. +L. =item B diff -Nru libplack-middleware-session-perl-0.30/lib/Plack/Session/State.pm libplack-middleware-session-perl-0.32/lib/Plack/Session/State.pm --- libplack-middleware-session-perl-0.30/lib/Plack/Session/State.pm 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/lib/Plack/Session/State.pm 2019-02-26 21:36:22.000000000 +0000 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.30'; +our $VERSION = '0.32'; our $AUTHORITY = 'cpan:STEVAN'; use Digest::SHA1 (); diff -Nru libplack-middleware-session-perl-0.30/lib/Plack/Session/Store/Cache.pm libplack-middleware-session-perl-0.32/lib/Plack/Session/Store/Cache.pm --- libplack-middleware-session-perl-0.30/lib/Plack/Session/Store/Cache.pm 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/lib/Plack/Session/Store/Cache.pm 2019-02-26 21:36:22.000000000 +0000 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.30'; +our $VERSION = '0.32'; our $AUTHORITY = 'cpan:STEVAN'; use Scalar::Util qw[ blessed ]; diff -Nru libplack-middleware-session-perl-0.30/lib/Plack/Session/Store/DBI.pm libplack-middleware-session-perl-0.32/lib/Plack/Session/Store/DBI.pm --- libplack-middleware-session-perl-0.30/lib/Plack/Session/Store/DBI.pm 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/lib/Plack/Session/Store/DBI.pm 2019-02-26 21:36:22.000000000 +0000 @@ -4,7 +4,7 @@ # XXX Is there a notion of auto-expiry? -our $VERSION = '0.30'; +our $VERSION = '0.32'; our $AUTHORITY = 'cpan:STEVAN'; use MIME::Base64 (); diff -Nru libplack-middleware-session-perl-0.30/lib/Plack/Session/Store/File.pm libplack-middleware-session-perl-0.32/lib/Plack/Session/Store/File.pm --- libplack-middleware-session-perl-0.30/lib/Plack/Session/Store/File.pm 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/lib/Plack/Session/Store/File.pm 2019-02-26 21:36:22.000000000 +0000 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.30'; +our $VERSION = '0.32'; our $AUTHORITY = 'cpan:STEVAN'; use Storable (); diff -Nru libplack-middleware-session-perl-0.30/lib/Plack/Session/Store/Null.pm libplack-middleware-session-perl-0.32/lib/Plack/Session/Store/Null.pm --- libplack-middleware-session-perl-0.30/lib/Plack/Session/Store/Null.pm 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/lib/Plack/Session/Store/Null.pm 2019-02-26 21:36:22.000000000 +0000 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.30'; +our $VERSION = '0.32'; our $AUTHORITY = 'cpan:STEVAN'; sub new { bless {} => shift } diff -Nru libplack-middleware-session-perl-0.30/lib/Plack/Session/Store.pm libplack-middleware-session-perl-0.32/lib/Plack/Session/Store.pm --- libplack-middleware-session-perl-0.30/lib/Plack/Session/Store.pm 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/lib/Plack/Session/Store.pm 2019-02-26 21:36:22.000000000 +0000 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.30'; +our $VERSION = '0.32'; our $AUTHORITY = 'cpan:STEVAN'; use Plack::Util::Accessor qw[ _stash ]; @@ -49,7 +49,7 @@ }; builder { - enable 'Session'; # this is the defalt store + enable 'Session'; # this is the default store $app; }; diff -Nru libplack-middleware-session-perl-0.30/lib/Plack/Session.pm libplack-middleware-session-perl-0.32/lib/Plack/Session.pm --- libplack-middleware-session-perl-0.30/lib/Plack/Session.pm 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/lib/Plack/Session.pm 2019-02-26 21:36:22.000000000 +0000 @@ -2,7 +2,7 @@ use strict; use warnings; -our $VERSION = '0.30'; +our $VERSION = '0.32'; our $AUTHORITY = 'cpan:STEVAN'; use Plack::Util::Accessor qw( session options ); diff -Nru libplack-middleware-session-perl-0.30/MANIFEST libplack-middleware-session-perl-0.32/MANIFEST --- libplack-middleware-session-perl-0.30/MANIFEST 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/MANIFEST 2019-02-26 21:36:22.000000000 +0000 @@ -1,4 +1,4 @@ -# This file was automatically generated by Dist::Zilla::Plugin::Manifest v5.032. +# This file was automatically generated by Dist::Zilla::Plugin::Manifest v6.012. Build.PL Changes LICENSE @@ -39,6 +39,6 @@ t/014_cookie_options.t t/015_cookie_options_mw.t t/016_cookiestore_w_customs.t +t/author-pod-syntax.t t/lib/TestSession.pm t/lib/TestSessionHash.pm -t/release-pod-syntax.t diff -Nru libplack-middleware-session-perl-0.30/META.json libplack-middleware-session-perl-0.32/META.json --- libplack-middleware-session-perl-0.30/META.json 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/META.json 2019-02-26 21:36:22.000000000 +0000 @@ -4,7 +4,7 @@ "Tatsuhiko Miyagawa" ], "dynamic_config" : 0, - "generated_by" : "Dist::Zilla version 5.032, Dist::Milla version v1.0.14, CPAN::Meta::Converter version 2.143240", + "generated_by" : "Dist::Milla version v1.0.20, Dist::Zilla version 6.012, CPAN::Meta::Converter version 2.143240", "license" : [ "perl_5" ], @@ -15,29 +15,29 @@ "name" : "Plack-Middleware-Session", "no_index" : { "directory" : [ - "t", - "xt", + "eg", + "examples", "inc", "share", - "eg", - "examples" + "t", + "xt" ] }, "prereqs" : { "configure" : { "requires" : { - "Module::Build::Tiny" : "0.039" + "Module::Build::Tiny" : "0.034" } }, "develop" : { "requires" : { - "Dist::Milla" : "v1.0.14", + "Dist::Milla" : "v1.0.20", "Test::Pod" : "1.41" } }, "runtime" : { "requires" : { - "Cookie::Baker" : "0", + "Cookie::Baker" : "0.10", "Digest::HMAC_SHA1" : "1.03", "Digest::SHA1" : "0", "Plack" : "0.9910" @@ -65,12 +65,14 @@ "web" : "https://github.com/plack/Plack-Middleware-Session" } }, - "version" : "0.30", + "version" : "0.32", "x_contributors" : [ "Alex Vandiver ", + "Florian Schlichting ", "franck cuny ", "Graham Knop ", "Ivan Baidakou ", + "John Lifsey ", "Lee Aylward ", "lestrrat ", "Mark Stosberg ", @@ -81,7 +83,12 @@ "s-aska ", "Stevan Little ", "Tatsuhiko Miyagawa ", - "Tokuhiro Matsuno " - ] + "Tatsuhiko Miyagawa ", + "Tokuhiro Matsuno ", + "vividsnow " + ], + "x_generated_by_perl" : "v5.20.1", + "x_serialization_backend" : "Cpanel::JSON::XS version 4.09", + "x_static_install" : 1 } diff -Nru libplack-middleware-session-perl-0.30/META.yml libplack-middleware-session-perl-0.32/META.yml --- libplack-middleware-session-perl-0.30/META.yml 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/META.yml 2019-02-26 21:36:22.000000000 +0000 @@ -9,9 +9,9 @@ Test::More: '0.88' Test::Requires: '0' configure_requires: - Module::Build::Tiny: '0.039' + Module::Build::Tiny: '0.034' dynamic_config: 0 -generated_by: 'Dist::Zilla version 5.032, Dist::Milla version v1.0.14, CPAN::Meta::Converter version 2.143240' +generated_by: 'Dist::Milla version v1.0.20, Dist::Zilla version 6.012, CPAN::Meta::Converter version 2.143240' license: perl meta-spec: url: http://module-build.sourceforge.net/META-spec-v1.4.html @@ -19,14 +19,14 @@ name: Plack-Middleware-Session no_index: directory: - - t - - xt - - inc - - share - eg - examples + - inc + - share + - t + - xt requires: - Cookie::Baker: '0' + Cookie::Baker: '0.10' Digest::HMAC_SHA1: '1.03' Digest::SHA1: '0' Plack: '0.9910' @@ -34,12 +34,14 @@ bugtracker: https://github.com/plack/Plack-Middleware-Session/issues homepage: https://github.com/plack/Plack-Middleware-Session repository: https://github.com/plack/Plack-Middleware-Session.git -version: '0.30' +version: '0.32' x_contributors: - 'Alex Vandiver ' + - 'Florian Schlichting ' - 'franck cuny ' - 'Graham Knop ' - 'Ivan Baidakou ' + - 'John Lifsey ' - 'Lee Aylward ' - 'lestrrat ' - 'Mark Stosberg ' @@ -50,4 +52,9 @@ - 's-aska ' - 'Stevan Little ' - 'Tatsuhiko Miyagawa ' + - 'Tatsuhiko Miyagawa ' - 'Tokuhiro Matsuno ' + - 'vividsnow ' +x_generated_by_perl: v5.20.1 +x_serialization_backend: 'YAML::Tiny version 1.73' +x_static_install: 1 diff -Nru libplack-middleware-session-perl-0.30/README libplack-middleware-session-perl-0.32/README --- libplack-middleware-session-perl-0.30/README 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/README 2019-02-26 21:36:22.000000000 +0000 @@ -107,10 +107,11 @@ change_id - If set to a true value, forces the session identifier to change. This - should always be done after logging in, to prevent session fixation - attacks from subdomains; see - http://en.wikipedia.org/wiki/Session_fixation#Attacks_using_cross-subdomain_cooking + If set to a true value, forces the session identifier to change + (rotate). This should always be done after logging in, to prevent + session fixation attacks from subdomains; see + http://en.wikipedia.org/wiki/Session_fixation#Attacks_using_cross-sub + domain_cooking expire @@ -120,7 +121,7 @@ no_store If set to a true value, no changes made to the session in this - request will be saved to the store. Either "expire" and /change_id + request will be saved to the store. Either "expire" and "change_id" take precedence over this, as both need to update the session store. late_store diff -Nru libplack-middleware-session-perl-0.30/t/015_cookie_options_mw.t libplack-middleware-session-perl-0.32/t/015_cookie_options_mw.t --- libplack-middleware-session-perl-0.30/t/015_cookie_options_mw.t 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/t/015_cookie_options_mw.t 2019-02-26 21:36:22.000000000 +0000 @@ -14,6 +14,7 @@ $env->{'psgix.session.options'}{path} = $path; $env->{'psgix.session.options'}{domain} = '.example.com'; $env->{'psgix.session.options'}{httponly} = 1; + $env->{'psgix.session.options'}{samesite} = 'Lax'; return [ 200, [], [ "Hi" ] ]; }; @@ -24,10 +25,10 @@ my $cb = shift; my $res = $cb->(GET "http://localhost/"); - like $res->header('Set-Cookie'), qr/plack_session=\w+; domain=.example.com; HttpOnly/; + like $res->header('Set-Cookie'), qr/plack_session=\w+; domain=.example.com; SameSite=Lax; HttpOnly/; $res = $cb->(GET "http://localhost/with_path"); - like $res->header('Set-Cookie'), qr/plack_session=\w+; domain=.example.com; path=\/foo; HttpOnly/; + like $res->header('Set-Cookie'), qr/plack_session=\w+; domain=.example.com; path=\/foo; SameSite=Lax; HttpOnly/; }; done_testing; diff -Nru libplack-middleware-session-perl-0.30/t/author-pod-syntax.t libplack-middleware-session-perl-0.32/t/author-pod-syntax.t --- libplack-middleware-session-perl-0.30/t/author-pod-syntax.t 1970-01-01 00:00:00.000000000 +0000 +++ libplack-middleware-session-perl-0.32/t/author-pod-syntax.t 2019-02-26 21:36:22.000000000 +0000 @@ -0,0 +1,15 @@ +#!perl + +BEGIN { + unless ($ENV{AUTHOR_TESTING}) { + print qq{1..0 # SKIP these tests are for testing by the author\n}; + exit + } +} + +# This file was automatically generated by Dist::Zilla::Plugin::PodSyntaxTests. +use strict; use warnings; +use Test::More; +use Test::Pod 1.41; + +all_pod_files_ok(); diff -Nru libplack-middleware-session-perl-0.30/t/release-pod-syntax.t libplack-middleware-session-perl-0.32/t/release-pod-syntax.t --- libplack-middleware-session-perl-0.30/t/release-pod-syntax.t 2015-03-02 18:24:41.000000000 +0000 +++ libplack-middleware-session-perl-0.32/t/release-pod-syntax.t 1970-01-01 00:00:00.000000000 +0000 @@ -1,14 +0,0 @@ -#!perl - -BEGIN { - unless ($ENV{RELEASE_TESTING}) { - require Test::More; - Test::More::plan(skip_all => 'these tests are for release candidate testing'); - } -} - -# This file was automatically generated by Dist::Zilla::Plugin::PodSyntaxTests. -use Test::More; -use Test::Pod 1.41; - -all_pod_files_ok();