cafe-grader-web Commit - r853:da84d756f1f9

cafe-grader-web

parent | child

Description:

change to encrypted cookies

Commit status:

[Not Reviewed]

References:

default

Diff options:

| | | |

Comments:

0 Commit comments 0 Inline Comments

Unresolved TODOs:

There are no unresolved TODOs

Add another comment

r853:da84d756f1f9 - Fri, 04 Feb 2022 01:24:06 - 2 files changed: 8 inserted, 6 deleted

app/controllers/application_controller.rb ¶ +4 -2

                   end
                   unauthorized_redirect unless GraderConfiguration["right.view_testcase"]
                 end
                 def unique_visitor_id
-            -     unless cookies[:uuid]
+            +     unless cookies.encrypted[:uuid]
                     value = SecureRandom.uuid
-            -       cookies[:uuid] = { value: value, expires: 20.year }
+            +       cookies.encrypted[:uuid] = { value: value, expires: 20.year }
                   end
+            +     puts "encrypt " + cookies.encrypted[:uuid]
+            +     puts cookies[:uuid]
                 end
                 protected
                 #redirect to root (and also force logout)
                 #if the user is not logged_in or the system is in "ADMIN ONLY" mode

app/controllers/login_controller.rb ¶ +4 -4

                     redirect_to :controller => 'main', :action => 'login'
                     return
                   end
                   #store uuid when login
                   if user.last_ip.nil?
-            -       user.last_ip = cookies[:uuid]
+            +       user.last_ip = cookies.encrypted[:uuid]
                   else
-            -       if user.last_ip != cookies[:uuid]
+            +       if user.last_ip != cookies.encrypted[:uuid]
-            -         user.last_ip =cookies[:uuid]
+            +         user.last_ip =cookies.encrypted[:uuid]
                       #log different login
                     end
                   end
                   #process logging in
                   session[:user_id] = user.id
                         contest_stat.save
                       end
                     end
                   end
                   #save login information
-            -     Login.create(user_id: user.id, ip_address: cookies[:uuid])
+            +     Login.create(user_id: user.id, ip_address: cookies.encrypted[:uuid])
                   redirect_to :controller => 'main', :action => 'list'
                 end
                 def site_login
                   begin

You need to be logged in to leave comments. Login now

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository permissions settings