Hello community,
here is the log from the commit of package perl-Apache-AuthCookie for
openSUSE:Factory checked in at 2019-11-20 12:38:06
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/perl-Apache-AuthCookie (Old)
and /work/SRC/openSUSE:Factory/.perl-Apache-AuthCookie.new.26869 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "perl-Apache-AuthCookie"
Wed Nov 20 12:38:06 2019 rev:27 rq:749845 version:3.28
Changes:
--------
---
/work/SRC/openSUSE:Factory/perl-Apache-AuthCookie/perl-Apache-AuthCookie.changes
2018-10-01 08:19:11.161900071 +0200
+++
/work/SRC/openSUSE:Factory/.perl-Apache-AuthCookie.new.26869/perl-Apache-AuthCookie.changes
2019-11-20 12:38:07.229790367 +0100
@@ -1,0 +2,10 @@
+Wed Nov 20 09:14:14 UTC 2019 - <[email protected]>
+
+- updated to 3.28
+ see /usr/share/doc/packages/perl-Apache-AuthCookie/Changes
+
+ 3.28 2019-11-19
+ - Add support for SameSite cookie property (can be strict/lax).
+ - Minor POD updates.
+
+-------------------------------------------------------------------
Old:
----
Apache-AuthCookie-3.27.tar.gz
New:
----
Apache-AuthCookie-3.28.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ perl-Apache-AuthCookie.spec ++++++
--- /var/tmp/diff_new_pack.zYl1tN/_old 2019-11-20 12:38:07.937790075 +0100
+++ /var/tmp/diff_new_pack.zYl1tN/_new 2019-11-20 12:38:07.941790074 +0100
@@ -1,7 +1,7 @@
#
# spec file for package perl-Apache-AuthCookie
#
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
Name: perl-Apache-AuthCookie
-Version: 3.27
+Version: 3.28
Release: 0
%define cpan_name Apache-AuthCookie
Summary: Perl Authentication and Authorization via cookies
@@ -205,14 +205,14 @@
%prep
%setup -q -n %{cpan_name}-%{version}
-find . -type f ! -name \*.pl -print0 | xargs -0 chmod 644
+find . -type f ! -path "*/t/*" ! -name "*.pl" ! -name "*.sh" ! -path "*/bin/*"
! -path "*/script/*" ! -name "configure" -print0 | xargs -0 chmod 644
%build
-%{__perl} Makefile.PL INSTALLDIRS=vendor
-%{__make} %{?_smp_mflags}
+perl Makefile.PL INSTALLDIRS=vendor
+make %{?_smp_mflags}
%check
-%{__make} test
+make test
%install
%perl_make_install
@@ -221,7 +221,7 @@
%files -f %{name}.files
%defattr(-,root,root,755)
-%doc Changes README README.modperl2 scripts
+%doc Changes README README.modperl2
%license LICENSE
%changelog
++++++ Apache-AuthCookie-3.27.tar.gz -> Apache-AuthCookie-3.28.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Apache-AuthCookie-3.27/Changes
new/Apache-AuthCookie-3.28/Changes
--- old/Apache-AuthCookie-3.27/Changes 2017-07-28 17:49:15.000000000 +0200
+++ new/Apache-AuthCookie-3.28/Changes 2019-11-19 16:36:52.000000000 +0100
@@ -1,5 +1,9 @@
Revision history for Apache::AuthCookie
+3.28 2019-11-19
+ - Add support for SameSite cookie property (can be strict/lax).
+ - Minor POD updates.
+
3.27 2017-07-28
- Fix POD spelling error [#118545].
@@ -112,8 +116,8 @@
3.17 2011-01-19
- skip the test suite if running as root. Apache::Test 1.34 fails the test
- suite if running as root instead of skipping it. By skipping, AuthCookie
can
- be installed via CPAN.pm as root.
+ suite if running as root instead of skipping it. By skipping, AuthCookie
+ can be installed via CPAN.pm as root.
3.16 2011-01-19
- require Apache::Test 1.32 - fixes ubuntu build issue
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Apache-AuthCookie-3.27/MANIFEST
new/Apache-AuthCookie-3.28/MANIFEST
--- old/Apache-AuthCookie-3.27/MANIFEST 2017-07-28 17:49:15.000000000 +0200
+++ new/Apache-AuthCookie-3.28/MANIFEST 2019-11-19 16:36:52.000000000 +0100
@@ -1,4 +1,4 @@
-# This file was automatically generated by Dist::Zilla::Plugin::Manifest
v6.009.
+# This file was automatically generated by Dist::Zilla::Plugin::Manifest
v6.012.
Changes
LICENSE
MANIFEST
@@ -24,6 +24,7 @@
t/Skeleton/AuthCookieHandler.pm
t/TEST.PL
t/author-pod-syntax.t
+t/author-signature.t
t/conf/extra.conf.in
t/htdocs/docs/authall/get_me.html
t/htdocs/docs/authany/get_me.html
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Apache-AuthCookie-3.27/META.json
new/Apache-AuthCookie-3.28/META.json
--- old/Apache-AuthCookie-3.27/META.json 2017-07-28 17:49:15.000000000
+0200
+++ new/Apache-AuthCookie-3.28/META.json 2019-11-19 16:36:52.000000000
+0100
@@ -4,7 +4,7 @@
"Michael Schout <[email protected]>"
],
"dynamic_config" : 1,
- "generated_by" : "Dist::Zilla version 6.009, CPAN::Meta::Converter version
2.150005",
+ "generated_by" : "Dist::Zilla version 6.012, CPAN::Meta::Converter version
2.150010",
"license" : [
"perl_5"
],
@@ -22,7 +22,14 @@
},
"develop" : {
"requires" : {
- "Test::Pod" : "1.41"
+ "Dist::Zilla" : "5",
+ "Dist::Zilla::Plugin::Prereqs" : "0",
+ "Dist::Zilla::PluginBundle::ApacheTest" : "0",
+ "Dist::Zilla::PluginBundle::Filter" : "0",
+ "Dist::Zilla::PluginBundle::MSCHOUT" : "0",
+ "Software::License::Perl_5" : "0",
+ "Test::Pod" : "1.41",
+ "Test::Signature" : "0"
}
},
"runtime" : {
@@ -45,20 +52,58 @@
}
}
},
+ "provides" : {
+ "Apache2::AuthCookie" : {
+ "file" : "lib/Apache2/AuthCookie.pm",
+ "version" : "3.28"
+ },
+ "Apache2::AuthCookie::Base" : {
+ "file" : "lib/Apache2/AuthCookie/Base.pm",
+ "version" : "3.28"
+ },
+ "Apache2::AuthCookie::Params" : {
+ "file" : "lib/Apache2/AuthCookie/Params.pm",
+ "version" : "3.28"
+ },
+ "Apache2_4::AuthCookie" : {
+ "file" : "lib/Apache2_4/AuthCookie.pm",
+ "version" : "3.28"
+ },
+ "Apache::AuthCookie" : {
+ "file" : "lib/Apache/AuthCookie.pm",
+ "version" : "3.28"
+ },
+ "Apache::AuthCookie::Params" : {
+ "file" : "lib/Apache/AuthCookie/Params.pm",
+ "version" : "3.28"
+ },
+ "Apache::AuthCookie::Params::Base" : {
+ "file" : "lib/Apache/AuthCookie/Params/Base.pm",
+ "version" : "3.28"
+ },
+ "Apache::AuthCookie::Params::CGI" : {
+ "file" : "lib/Apache/AuthCookie/Params/CGI.pm",
+ "version" : "3.28"
+ },
+ "Apache::AuthCookie::Util" : {
+ "file" : "lib/Apache/AuthCookie/Util.pm",
+ "version" : "3.28"
+ }
+ },
"release_status" : "stable",
"resources" : {
"bugtracker" : {
- "mailto" : "bug-apache-authcookie at rt.cpan.org",
- "web" :
"http://rt.cpan.org/Public/Dist/Display.html?Name=Apache-AuthCookie";
+ "web" : "https://github.com/mschout/apache-authcookie/issues";
},
- "homepage" : "http://search.cpan.org/dist/Apache-AuthCookie/";,
+ "homepage" : "https://github.com/mschout/apache-authcookie";,
"repository" : {
"type" : "git",
- "url" : "git://github.com/mschout/apache-authcookie.git",
+ "url" : "https://github.com/mschout/apache-authcookie.git";,
"web" : "https://github.com/mschout/apache-authcookie";
}
},
- "version" : "3.27",
- "x_serialization_backend" : "Cpanel::JSON::XS version 3.0217"
+ "version" : "3.28",
+ "x_generated_by_perl" : "v5.26.2",
+ "x_serialization_backend" : "Cpanel::JSON::XS version 4.04"
}
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Apache-AuthCookie-3.27/META.yml
new/Apache-AuthCookie-3.28/META.yml
--- old/Apache-AuthCookie-3.27/META.yml 2017-07-28 17:49:15.000000000 +0200
+++ new/Apache-AuthCookie-3.28/META.yml 2019-11-19 16:36:52.000000000 +0100
@@ -8,12 +8,40 @@
Apache::Test: '1.39'
ExtUtils::MakeMaker: '0'
dynamic_config: 1
-generated_by: 'Dist::Zilla version 6.009, CPAN::Meta::Converter version
2.150005'
+generated_by: 'Dist::Zilla version 6.012, CPAN::Meta::Converter version
2.150010'
license: perl
meta-spec:
url: http://module-build.sourceforge.net/META-spec-v1.4.html
version: '1.4'
name: Apache-AuthCookie
+provides:
+ Apache2::AuthCookie:
+ file: lib/Apache2/AuthCookie.pm
+ version: '3.28'
+ Apache2::AuthCookie::Base:
+ file: lib/Apache2/AuthCookie/Base.pm
+ version: '3.28'
+ Apache2::AuthCookie::Params:
+ file: lib/Apache2/AuthCookie/Params.pm
+ version: '3.28'
+ Apache2_4::AuthCookie:
+ file: lib/Apache2_4/AuthCookie.pm
+ version: '3.28'
+ Apache::AuthCookie:
+ file: lib/Apache/AuthCookie.pm
+ version: '3.28'
+ Apache::AuthCookie::Params:
+ file: lib/Apache/AuthCookie/Params.pm
+ version: '3.28'
+ Apache::AuthCookie::Params::Base:
+ file: lib/Apache/AuthCookie/Params/Base.pm
+ version: '3.28'
+ Apache::AuthCookie::Params::CGI:
+ file: lib/Apache/AuthCookie/Params/CGI.pm
+ version: '3.28'
+ Apache::AuthCookie::Util:
+ file: lib/Apache/AuthCookie/Util.pm
+ version: '3.28'
recommends:
WWW::Form::UrlEncoded::XS: '0'
requires:
@@ -25,8 +53,9 @@
Test::More: '0.94'
WWW::Form::UrlEncoded: '0'
resources:
- bugtracker:
http://rt.cpan.org/Public/Dist/Display.html?Name=Apache-AuthCookie
- homepage: http://search.cpan.org/dist/Apache-AuthCookie/
- repository: git://github.com/mschout/apache-authcookie.git
-version: '3.27'
-x_serialization_backend: 'YAML::Tiny version 1.69'
+ bugtracker: https://github.com/mschout/apache-authcookie/issues
+ homepage: https://github.com/mschout/apache-authcookie
+ repository: https://github.com/mschout/apache-authcookie.git
+version: '3.28'
+x_generated_by_perl: v5.26.2
+x_serialization_backend: 'YAML::Tiny version 1.73'
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Apache-AuthCookie-3.27/Makefile.PL
new/Apache-AuthCookie-3.28/Makefile.PL
--- old/Apache-AuthCookie-3.27/Makefile.PL 2017-07-28 17:49:15.000000000
+0200
+++ new/Apache-AuthCookie-3.28/Makefile.PL 2019-11-19 16:36:52.000000000
+0100
@@ -1,6 +1,6 @@
# This Makefile.PL for Apache-AuthCookie was generated by
-# Dist::Zilla::Plugin::MakeMaker::ApacheTest 0.03
-# and Dist::Zilla::Plugin::MakeMaker::Awesome 0.38.
+# Dist::Zilla::Plugin::MakeMaker::ApacheTest 0.04
+# and Dist::Zilla::Plugin::MakeMaker::Awesome 0.47.
# Don't edit it but the dist.ini and plugins used to construct it.
use strict;
@@ -37,7 +37,7 @@
"TEST_REQUIRES" => {
"URI::Escape" => "1.31"
},
- "VERSION" => "3.27",
+ "VERSION" => "3.28",
"clean" => {
"FILES" => [
"t/TEST"
@@ -59,10 +59,10 @@
"WWW::Form::UrlEncoded" => 0
);
-# inserted by Dist::Zilla::Plugin::DynamicPrereqs 0.032
+# inserted by Dist::Zilla::Plugin::DynamicPrereqs 0.035
if ($mp_version == 2) { requires('mod_perl2', '1.999022'); } elsif
($mp_version == 1) { requires('mod_perl', '1.27'); }
-unless ( eval { ExtUtils::MakeMaker->VERSION(6.63_03) } ) {
+unless ( eval { ExtUtils::MakeMaker->VERSION('6.63_03') } ) {
delete $WriteMakefileArgs{TEST_REQUIRES};
delete $WriteMakefileArgs{BUILD_REQUIRES};
$WriteMakefileArgs{PREREQ_PM} = \%FallbackPrereqs;
@@ -110,15 +110,15 @@
return 2;
}
-# inserted by Dist::Zilla::Plugin::DynamicPrereqs 0.032
+# inserted by Dist::Zilla::Plugin::DynamicPrereqs 0.035
sub _add_prereq {
my ($mm_key, $module, $version_or_range) = @_;
$version_or_range ||= 0;
- warn "$module already exists in $mm_key -- need to do a sane metamerge!"
+ warn "$module already exists in $mm_key (at version
$WriteMakefileArgs{$mm_key}{$module}) -- need to do a sane metamerge!"
if exists $WriteMakefileArgs{$mm_key}{$module}
and $WriteMakefileArgs{$mm_key}{$module} ne '0'
and $WriteMakefileArgs{$mm_key}{$module} ne $version_or_range;
- warn "$module already exists in FallbackPrereqs -- need to do a sane
metamerge!"
+ warn "$module already exists in FallbackPrereqs (at version
$WriteMakefileArgs{$mm_key}{$module}) -- need to do a sane metamerge!"
if exists $FallbackPrereqs{$module} and $FallbackPrereqs{$module} ne '0'
and $FallbackPrereqs{$module} ne $version_or_range;
$WriteMakefileArgs{$mm_key}{$module} = $FallbackPrereqs{$module} =
$version_or_range;
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Apache-AuthCookie-3.27/SIGNATURE
new/Apache-AuthCookie-3.28/SIGNATURE
--- old/Apache-AuthCookie-3.27/SIGNATURE 2017-07-28 17:49:15.000000000
+0200
+++ new/Apache-AuthCookie-3.28/SIGNATURE 2019-11-19 16:36:52.000000000
+0100
@@ -1,5 +1,5 @@
This file contains message digests of all files listed in MANIFEST,
-signed via the Module::Signature module, version 0.80.
+signed via the Module::Signature module, version 0.81.
To verify the content in this distribution, first make sure you have
Module::Signature installed, then type:
@@ -14,31 +14,32 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
-SHA1 8b1c46ea31117685766d4506c6780b1eee4697d2 Changes
+SHA1 fe72ac1f2889686a810cd2de3e09c3aefa7f52e7 Changes
SHA1 cb36dd242de6d18cd64c4b55444347ebf09e43e7 LICENSE
-SHA1 7f8cd7da1a35bf2e823ee1a48559073bfbc687ba MANIFEST
+SHA1 def2e0aaac81605fb2882534da78860f2f3a6d06 MANIFEST
SHA1 0ff75e1a6186d7274e76387884eca541fdd5ca4a MANIFEST.SKIP
-SHA1 157f38466ddc06dea09f1097238de59a3f57e5bd META.json
-SHA1 7d77321fc8c674491cb5fcf4548fa86bb06e74d2 META.yml
-SHA1 a5c35f172d4c022587378e0b366915dded76c5f2 Makefile.PL
+SHA1 b3fb49bc74ad5ef515d5daaf288469a21eca0a1a META.json
+SHA1 e52c3b60a1c1a46c197bbfbaab54d1cd1152e409 META.yml
+SHA1 7e82961d4f23d5d33785c700d036b8c3b11f87ba Makefile.PL
SHA1 b9945378262a25db34dcdba06da956a52876188b README
SHA1 f9d2e5d4bcafb4b3d73b0a1f390aa25579cafbd2 README.apache-2.4.pod
SHA1 ccbc46a0385aabadd1e6f4a22f8d4ebb11b44901 README.modperl2
-SHA1 0bfe772fe7600ce7e9d733908e5a94164db786be lib/Apache/AuthCookie.pm
-SHA1 79c27e63ac3ad0df863bcc687331fb0987810247 lib/Apache/AuthCookie/FAQ.pod
-SHA1 0c5172e975e0a806f68271f606cb412d1454c3ee lib/Apache/AuthCookie/Params.pm
-SHA1 31e01d2691c0da684874f61c79802baa36fb5e1a
lib/Apache/AuthCookie/Params/Base.pm
-SHA1 bc823ef001654e46d15513c6d18adf8036750fce
lib/Apache/AuthCookie/Params/CGI.pm
-SHA1 5f6a6a063fa775d17a786baa5365de54b60f48b3 lib/Apache/AuthCookie/Util.pm
-SHA1 f3da087925ffac777fc35dad8a4952837173ed2b lib/Apache2/AuthCookie.pm
-SHA1 804ce0b965112499497abaef05685289a1716c6b lib/Apache2/AuthCookie/Base.pm
-SHA1 a227d7d35f50432d1ccb9d02c70b650d15fb38a8 lib/Apache2/AuthCookie/Params.pm
-SHA1 bbc70f9699764d3d7ce6df12c53af5a5685a91a3 lib/Apache2_4/AuthCookie.pm
+SHA1 e5b590c4028e31fc4e2e05d0d790c951505ca76c lib/Apache/AuthCookie.pm
+SHA1 a5a155c7c1114bd1521b166fe2289b6d8defcc8f lib/Apache/AuthCookie/FAQ.pod
+SHA1 5591f3a83dcfd292b018f8dcfd75d32378627468 lib/Apache/AuthCookie/Params.pm
+SHA1 8b96d310e565562e1c131cdb2e9e97741aa82579
lib/Apache/AuthCookie/Params/Base.pm
+SHA1 61d90732b1757078c17ac45199ca5e6797ab79eb
lib/Apache/AuthCookie/Params/CGI.pm
+SHA1 2e4d31e8fffef85465c6567ea7311dc515a058dc lib/Apache/AuthCookie/Util.pm
+SHA1 4c9362a58bea52476dffda3a48d9d628ee61166a lib/Apache2/AuthCookie.pm
+SHA1 6c515c233a85b35b208b6a0b77a6ebf2b694a871 lib/Apache2/AuthCookie/Base.pm
+SHA1 026f7f258bb85168c4a8fcde905e58508728f397 lib/Apache2/AuthCookie/Params.pm
+SHA1 33026bb4f30abe1d5a2afd8827dd6f4d6d1bcef7 lib/Apache2_4/AuthCookie.pm
SHA1 fee15f1cd6c3fe17e8370838aafe6d54bfd72611 scripts/perlbrew-smoke
SHA1 3ac8de46e7bba83f6969caec3c9c14cbd99881cb t/Skeleton/AuthCookieHandler.pm
SHA1 b1f854e6edecbdd44fc7b8db719e0fe21d9340d1 t/TEST.PL
SHA1 8efad25309730a4d501fb40fc03eda4697303372 t/author-pod-syntax.t
-SHA1 fd59f3c44b4e581ab3c4345768bafcd2a7f49e0b t/conf/extra.conf.in
+SHA1 19cc343f8a85c6805bbeb02580487483a6283887 t/author-signature.t
+SHA1 fa77f587d29613a40b627846db67d69442c11ac0 t/conf/extra.conf.in
SHA1 2156ea84b69ca7fef7b73d72a06c07cb145da7a9 t/htdocs/docs/authall/get_me.html
SHA1 2156ea84b69ca7fef7b73d72a06c07cb145da7a9 t/htdocs/docs/authany/get_me.html
SHA1 2156ea84b69ca7fef7b73d72a06c07cb145da7a9
t/htdocs/docs/cookiename/get_me.html
@@ -55,24 +56,24 @@
SHA1 b17cdb6e4dfb752901c2a9df5ce822a2d54b92b5
t/lib/Sample/Apache/AuthCookieHandler.pm
SHA1 9ba342e14a302d89f38ab063c56e5ae000a7595c
t/lib/Sample/Apache2/AuthCookieHandler.pm
SHA1 b19593e0dc51baa6a4d84bc27da2e53632ab8592
t/lib/Sample/Apache2_4/AuthCookieHandler.pm
-SHA1 fc535ff1a126607231d4d60b22c2dd71e1f35265 t/real.t
+SHA1 28df698c77347acf6a6957bef1483d0c01ad282a t/real.t
SHA1 f0c37746e0277de1ddb62c9227628a5ebe5a777a t/signature.t
SHA1 e91bf0ef7d63322eaf15ca7d9907c6db47ce90ca t/startup.pl
SHA1 da33f704880ddd2596521c39be5b7b6a22913882 t/util.t
-----BEGIN PGP SIGNATURE-----
-Version: GnuPG v2
-iQIVAwUBWXtc+6Ql27WkM10aAQi3HhAAqzPSppduNKajE6Ig6wk7aizZHar21WXV
-fXxBxrYiGdhmJxHFaXKSoeF6ld/PcYXHRp3v5ogmj2LH2xpAPbCWwV1RAzFAHaJq
-K9Ny+9jYeC90NGwCRkhSNpTnYt6r3klO+Dtq6K9v4Glwhd1BmM4gdADqTwI1fr3E
-twJCNVyIgKIFqZ1c1pwsN5H/aESAclYDNSQPYaya41VimfVmGlHJfaayunl9pIQA
-Prb/6B0rrtP5eb85Q+M1CKeUrUmsrDGmJKvRDNmR2LnyQ9di4kwiLuWD943aaJRX
-UeaZPm0bBB2wssCd2NXGCr/xjY0JM8D2TG4VuNHhXf9e4uW5wwENH4HEZ0PVD//p
-NkHpL2r2Hv9CoT0dqGmRwpqjy0esw0jv1uMIT/QbFkXL+/qUNi9taH68dkK9Y8I+
-v7y302HJJrt29tOEooBTm/+pqgtc1dHbczA4MXE2yZz7yQRBs5vj+S8A46wyCeFo
-CS0U/KniH2oYDSMLAIi3XzmTtEREQuVxVIVTL4Eba3cKQRyzWVXpOmV+XDGdrjKX
-DOLXR8ekAABwf/1m3jlmmgAc5qrNw0v57E47yhvAMgTlhM0pAdTcdKZWnoFRbB51
-IVxh3IYh8G8NqlHqDWJs7UAMYgGHsTLR9M38mWQs/r3zh9NHjkTcqXqZDITztiyr
-Sc7lobvsme8=
-=tCSH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+=Pnp+
-----END PGP SIGNATURE-----
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Apache-AuthCookie-3.27/lib/Apache/AuthCookie/FAQ.pod
new/Apache-AuthCookie-3.28/lib/Apache/AuthCookie/FAQ.pod
--- old/Apache-AuthCookie-3.27/lib/Apache/AuthCookie/FAQ.pod 2017-07-28
17:49:15.000000000 +0200
+++ new/Apache-AuthCookie-3.28/lib/Apache/AuthCookie/FAQ.pod 2019-11-19
16:36:52.000000000 +0100
@@ -9,13 +9,15 @@
=pod
+=encoding UTF-8
+
=head1 NAME
Apache::AuthCookie::FAQ - Frequently Asked Questions about Apache::AuthCookie.
=head1 VERSION
-version 3.27
+version 3.28
=head1 DESCRIPTION
@@ -44,13 +46,17 @@
=head1 SOURCE
-The development version is on github at
L<http://github.com/mschout/apache-authcookie>
-and may be cloned from L<git://github.com/mschout/apache-authcookie.git>
+The development version is on github at
L<https://https://github.com/mschout/apache-authcookie>
+and may be cloned from
L<git://https://github.com/mschout/apache-authcookie.git>
=head1 BUGS
-Please report any bugs or feature requests to
[email protected] or through the web interface at:
- http://rt.cpan.org/Public/Dist/Display.html?Name=Apache-AuthCookie
+Please report any bugs or feature requests on the bugtracker website
+L<https://github.com/mschout/apache-authcookie/issues>
+
+When submitting a bug or request, please include a test-file or a
+patch to an existing test-file that illustrates the bug or desired
+feature.
=head1 AUTHOR
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/Apache-AuthCookie-3.27/lib/Apache/AuthCookie/Params/Base.pm
new/Apache-AuthCookie-3.28/lib/Apache/AuthCookie/Params/Base.pm
--- old/Apache-AuthCookie-3.27/lib/Apache/AuthCookie/Params/Base.pm
2017-07-28 17:49:15.000000000 +0200
+++ new/Apache-AuthCookie-3.28/lib/Apache/AuthCookie/Params/Base.pm
2019-11-19 16:36:52.000000000 +0100
@@ -1,5 +1,5 @@
package Apache::AuthCookie::Params::Base;
-$Apache::AuthCookie::Params::Base::VERSION = '3.27';
+$Apache::AuthCookie::Params::Base::VERSION = '3.28';
# ABSTRACT: Internal CGI AuthCookie Params Base Class
use strict;
@@ -49,13 +49,15 @@
=pod
+=encoding UTF-8
+
=head1 NAME
Apache::AuthCookie::Params::Base - Internal CGI AuthCookie Params Base Class
=head1 VERSION
-version 3.27
+version 3.28
=head1 SYNOPSIS
@@ -76,13 +78,17 @@
=head1 SOURCE
-The development version is on github at
L<http://github.com/mschout/apache-authcookie>
-and may be cloned from L<git://github.com/mschout/apache-authcookie.git>
+The development version is on github at
L<https://https://github.com/mschout/apache-authcookie>
+and may be cloned from
L<git://https://github.com/mschout/apache-authcookie.git>
=head1 BUGS
-Please report any bugs or feature requests to
[email protected] or through the web interface at:
- http://rt.cpan.org/Public/Dist/Display.html?Name=Apache-AuthCookie
+Please report any bugs or feature requests on the bugtracker website
+L<https://github.com/mschout/apache-authcookie/issues>
+
+When submitting a bug or request, please include a test-file or a
+patch to an existing test-file that illustrates the bug or desired
+feature.
=head1 AUTHOR
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/Apache-AuthCookie-3.27/lib/Apache/AuthCookie/Params/CGI.pm
new/Apache-AuthCookie-3.28/lib/Apache/AuthCookie/Params/CGI.pm
--- old/Apache-AuthCookie-3.27/lib/Apache/AuthCookie/Params/CGI.pm
2017-07-28 17:49:15.000000000 +0200
+++ new/Apache-AuthCookie-3.28/lib/Apache/AuthCookie/Params/CGI.pm
2019-11-19 16:36:52.000000000 +0100
@@ -1,5 +1,5 @@
package Apache::AuthCookie::Params::CGI;
-$Apache::AuthCookie::Params::CGI::VERSION = '3.27';
+$Apache::AuthCookie::Params::CGI::VERSION = '3.28';
# ABSTRACT: Internal CGI Params Subclass
use strict;
@@ -174,13 +174,15 @@
=pod
+=encoding UTF-8
+
=head1 NAME
Apache::AuthCookie::Params::CGI - Internal CGI Params Subclass
=head1 VERSION
-version 3.27
+version 3.28
=head1 SYNOPSIS
@@ -251,13 +253,17 @@
=head1 SOURCE
-The development version is on github at
L<http://github.com/mschout/apache-authcookie>
-and may be cloned from L<git://github.com/mschout/apache-authcookie.git>
+The development version is on github at
L<https://https://github.com/mschout/apache-authcookie>
+and may be cloned from
L<git://https://github.com/mschout/apache-authcookie.git>
=head1 BUGS
-Please report any bugs or feature requests to
[email protected] or through the web interface at:
- http://rt.cpan.org/Public/Dist/Display.html?Name=Apache-AuthCookie
+Please report any bugs or feature requests on the bugtracker website
+L<https://github.com/mschout/apache-authcookie/issues>
+
+When submitting a bug or request, please include a test-file or a
+patch to an existing test-file that illustrates the bug or desired
+feature.
=head1 AUTHOR
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/Apache-AuthCookie-3.27/lib/Apache/AuthCookie/Params.pm
new/Apache-AuthCookie-3.28/lib/Apache/AuthCookie/Params.pm
--- old/Apache-AuthCookie-3.27/lib/Apache/AuthCookie/Params.pm 2017-07-28
17:49:15.000000000 +0200
+++ new/Apache-AuthCookie-3.28/lib/Apache/AuthCookie/Params.pm 2019-11-19
16:36:52.000000000 +0100
@@ -1,5 +1,5 @@
package Apache::AuthCookie::Params;
-$Apache::AuthCookie::Params::VERSION = '3.27';
+$Apache::AuthCookie::Params::VERSION = '3.28';
# ABSTRACT: AuthCookie Params Driver for mod_perl 1.x
use strict;
@@ -34,13 +34,15 @@
=pod
+=encoding UTF-8
+
=head1 NAME
Apache::AuthCookie::Params - AuthCookie Params Driver for mod_perl 1.x
=head1 VERSION
-version 3.27
+version 3.28
=head1 SYNOPSIS
@@ -54,13 +56,17 @@
=head1 SOURCE
-The development version is on github at
L<http://github.com/mschout/apache-authcookie>
-and may be cloned from L<git://github.com/mschout/apache-authcookie.git>
+The development version is on github at
L<https://https://github.com/mschout/apache-authcookie>
+and may be cloned from
L<git://https://github.com/mschout/apache-authcookie.git>
=head1 BUGS
-Please report any bugs or feature requests to
[email protected] or through the web interface at:
- http://rt.cpan.org/Public/Dist/Display.html?Name=Apache-AuthCookie
+Please report any bugs or feature requests on the bugtracker website
+L<https://github.com/mschout/apache-authcookie/issues>
+
+When submitting a bug or request, please include a test-file or a
+patch to an existing test-file that illustrates the bug or desired
+feature.
=head1 AUTHOR
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Apache-AuthCookie-3.27/lib/Apache/AuthCookie/Util.pm
new/Apache-AuthCookie-3.28/lib/Apache/AuthCookie/Util.pm
--- old/Apache-AuthCookie-3.27/lib/Apache/AuthCookie/Util.pm 2017-07-28
17:49:15.000000000 +0200
+++ new/Apache-AuthCookie-3.28/lib/Apache/AuthCookie/Util.pm 2019-11-19
16:36:52.000000000 +0100
@@ -1,5 +1,5 @@
package Apache::AuthCookie::Util;
-$Apache::AuthCookie::Util::VERSION = '3.27';
+$Apache::AuthCookie::Util::VERSION = '3.28';
# ABSTRACT: Internal Utility Functions for AuthCookie
use strict;
@@ -98,13 +98,15 @@
=pod
+=encoding UTF-8
+
=head1 NAME
Apache::AuthCookie::Util - Internal Utility Functions for AuthCookie
=head1 VERSION
-version 3.27
+version 3.28
=head1 DESCRIPTION
@@ -114,13 +116,17 @@
=head1 SOURCE
-The development version is on github at
L<http://github.com/mschout/apache-authcookie>
-and may be cloned from L<git://github.com/mschout/apache-authcookie.git>
+The development version is on github at
L<https://https://github.com/mschout/apache-authcookie>
+and may be cloned from
L<git://https://github.com/mschout/apache-authcookie.git>
=head1 BUGS
-Please report any bugs or feature requests to
[email protected] or through the web interface at:
- http://rt.cpan.org/Public/Dist/Display.html?Name=Apache-AuthCookie
+Please report any bugs or feature requests on the bugtracker website
+L<https://github.com/mschout/apache-authcookie/issues>
+
+When submitting a bug or request, please include a test-file or a
+patch to an existing test-file that illustrates the bug or desired
+feature.
=head1 AUTHOR
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Apache-AuthCookie-3.27/lib/Apache/AuthCookie.pm
new/Apache-AuthCookie-3.28/lib/Apache/AuthCookie.pm
--- old/Apache-AuthCookie-3.27/lib/Apache/AuthCookie.pm 2017-07-28
17:49:15.000000000 +0200
+++ new/Apache-AuthCookie-3.28/lib/Apache/AuthCookie.pm 2019-11-19
16:36:52.000000000 +0100
@@ -1,5 +1,5 @@
package Apache::AuthCookie;
-$Apache::AuthCookie::VERSION = '3.27';
+$Apache::AuthCookie::VERSION = '3.28';
# ABSTRACT: Perl Authentication and Authorization via cookies
use strict;
@@ -586,6 +586,15 @@
$string .= '; HttpOnly';
}
+ # SameSite is an anti-CSRF cookie property. See
+ # https://www.owasp.org/index.php/SameSite
+ if (my $samesite = $r->dir_config("${auth_name}SameSite")) {
+ if ($samesite =~ /\A(strict|lax)\z/i) {
+ $samesite = lc($1);
+ $string .= "; SameSite=$samesite";
+ }
+ }
+
return $string;
}
@@ -626,13 +635,15 @@
=pod
+=encoding UTF-8
+
=head1 NAME
Apache::AuthCookie - Perl Authentication and Authorization via cookies
=head1 VERSION
-version 3.27
+version 3.28
=head1 SYNOPSIS
@@ -1109,8 +1120,6 @@
Returns the value of C<PerlSetVar ${auth_name}Path>.
-=encoding UTF-8
-
=head1 EXAMPLE
For an example of how to use Apache::AuthCookie, you may want to check
@@ -1239,7 +1248,7 @@
The value stored in C<< $r-E<gt>connection-E<gt>user >> will be encoded as
B<bytes>, not characters using the configured encoding name. This is because
the value stored by mod_perl is a C API string, and not a perl string. You can
-use L<decoded_user()> to get user string encoded using B<character> semantics.
+use L</decoded_user()> to get user string encoded using B<character> semantics.
=back
@@ -1249,7 +1258,7 @@
=item *
-your L<authen_cred()> and L<authen_ses_key()> function is expected to return
+your L</authen_cred()> and L</authen_ses_key()> function is expected to return
a decoded username, either by passing it through L<Encode/decode()>, or, by
turning on the UTF8 flag if appropriate.
@@ -1258,12 +1267,12 @@
Due to the way HTTP works, cookies cannot contain non-ASCII characters.
Because of this, if you are including the username in your generated session
key, you will need to escape any non-ascii characters in the session key
-returned by L<authen_cred()>.
+returned by L</authen_cred()>.
=item *
-Similarly, you must reverse this escaping process in L<authen_ses_key()> and
-return a L<Encode/decode()> decoded username. If your L<authen_cred()>
+Similarly, you must reverse this escaping process in L</authen_ses_key()> and
+return a L<Encode/decode()> decoded username. If your L</authen_cred()>
function already only generates ASCII-only session keys then you do not need to
worry about any of this.
@@ -1271,7 +1280,7 @@
The value stored in C<< $r-E<gt>connection-E<gt>user >> will be encoded using
bytes semantics using the configured B<Encoding>. If you want the decoded user
-value, use L<decoded_user()> instead.
+value, use L</decoded_user()> instead.
=back
@@ -1331,13 +1340,17 @@
=head1 SOURCE
-The development version is on github at
L<http://github.com/mschout/apache-authcookie>
-and may be cloned from L<git://github.com/mschout/apache-authcookie.git>
+The development version is on github at
L<https://https://github.com/mschout/apache-authcookie>
+and may be cloned from
L<git://https://github.com/mschout/apache-authcookie.git>
=head1 BUGS
-Please report any bugs or feature requests to
[email protected] or through the web interface at:
- http://rt.cpan.org/Public/Dist/Display.html?Name=Apache-AuthCookie
+Please report any bugs or feature requests on the bugtracker website
+L<https://github.com/mschout/apache-authcookie/issues>
+
+When submitting a bug or request, please include a test-file or a
+patch to an existing test-file that illustrates the bug or desired
+feature.
=head1 AUTHOR
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/Apache-AuthCookie-3.27/lib/Apache2/AuthCookie/Base.pm
new/Apache-AuthCookie-3.28/lib/Apache2/AuthCookie/Base.pm
--- old/Apache-AuthCookie-3.27/lib/Apache2/AuthCookie/Base.pm 2017-07-28
17:49:15.000000000 +0200
+++ new/Apache-AuthCookie-3.28/lib/Apache2/AuthCookie/Base.pm 2019-11-19
16:36:52.000000000 +0100
@@ -1,5 +1,5 @@
package Apache2::AuthCookie::Base;
-$Apache2::AuthCookie::Base::VERSION = '3.27';
+$Apache2::AuthCookie::Base::VERSION = '3.28';
# ABSTRACT: Common Methods Shared by Apache2 and Apache2_4 AuthCookie
Subclasses.
use strict;
@@ -157,6 +157,15 @@
$string .= '; HttpOnly';
}
+ # SameSite is an anti-CSRF cookie property. See
+ # https://www.owasp.org/index.php/SameSite
+ if (my $samesite = $r->dir_config("${auth_name}SameSite")) {
+ if ($samesite =~ /\A(strict|lax)\z/i) {
+ $samesite = lc($1);
+ $string .= "; SameSite=$samesite";
+ }
+ }
+
return $string;
}
@@ -524,13 +533,15 @@
=pod
+=encoding UTF-8
+
=head1 NAME
Apache2::AuthCookie::Base - Common Methods Shared by Apache2 and Apache2_4
AuthCookie Subclasses.
=head1 VERSION
-version 3.27
+version 3.28
=head1 DESCRIPTION
@@ -702,13 +713,17 @@
=head1 SOURCE
-The development version is on github at
L<http://github.com/mschout/apache-authcookie>
-and may be cloned from L<git://github.com/mschout/apache-authcookie.git>
+The development version is on github at
L<https://https://github.com/mschout/apache-authcookie>
+and may be cloned from
L<git://https://github.com/mschout/apache-authcookie.git>
=head1 BUGS
-Please report any bugs or feature requests to
[email protected] or through the web interface at:
- http://rt.cpan.org/Public/Dist/Display.html?Name=Apache-AuthCookie
+Please report any bugs or feature requests on the bugtracker website
+L<https://github.com/mschout/apache-authcookie/issues>
+
+When submitting a bug or request, please include a test-file or a
+patch to an existing test-file that illustrates the bug or desired
+feature.
=head1 AUTHOR
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/Apache-AuthCookie-3.27/lib/Apache2/AuthCookie/Params.pm
new/Apache-AuthCookie-3.28/lib/Apache2/AuthCookie/Params.pm
--- old/Apache-AuthCookie-3.27/lib/Apache2/AuthCookie/Params.pm 2017-07-28
17:49:15.000000000 +0200
+++ new/Apache-AuthCookie-3.28/lib/Apache2/AuthCookie/Params.pm 2019-11-19
16:36:52.000000000 +0100
@@ -1,5 +1,5 @@
package Apache2::AuthCookie::Params;
-$Apache2::AuthCookie::Params::VERSION = '3.27';
+$Apache2::AuthCookie::Params::VERSION = '3.28';
# ABSTRACT: AuthCookie Params Driver for mod_perl 2.x
use strict;
@@ -34,13 +34,15 @@
=pod
+=encoding UTF-8
+
=head1 NAME
Apache2::AuthCookie::Params - AuthCookie Params Driver for mod_perl 2.x
=head1 VERSION
-version 3.27
+version 3.28
=head1 SYNOPSIS
@@ -54,13 +56,17 @@
=head1 SOURCE
-The development version is on github at
L<http://github.com/mschout/apache-authcookie>
-and may be cloned from L<git://github.com/mschout/apache-authcookie.git>
+The development version is on github at
L<https://https://github.com/mschout/apache-authcookie>
+and may be cloned from
L<git://https://github.com/mschout/apache-authcookie.git>
=head1 BUGS
-Please report any bugs or feature requests to
[email protected] or through the web interface at:
- http://rt.cpan.org/Public/Dist/Display.html?Name=Apache-AuthCookie
+Please report any bugs or feature requests on the bugtracker website
+L<https://github.com/mschout/apache-authcookie/issues>
+
+When submitting a bug or request, please include a test-file or a
+patch to an existing test-file that illustrates the bug or desired
+feature.
=head1 AUTHOR
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Apache-AuthCookie-3.27/lib/Apache2/AuthCookie.pm
new/Apache-AuthCookie-3.28/lib/Apache2/AuthCookie.pm
--- old/Apache-AuthCookie-3.27/lib/Apache2/AuthCookie.pm 2017-07-28
17:49:15.000000000 +0200
+++ new/Apache-AuthCookie-3.28/lib/Apache2/AuthCookie.pm 2019-11-19
16:36:52.000000000 +0100
@@ -1,5 +1,5 @@
package Apache2::AuthCookie;
-$Apache2::AuthCookie::VERSION = '3.27';
+$Apache2::AuthCookie::VERSION = '3.28';
# ABSTRACT: Perl Authentication and Authorization via cookies
use strict;
@@ -110,13 +110,15 @@
=pod
+=encoding UTF-8
+
=head1 NAME
Apache2::AuthCookie - Perl Authentication and Authorization via cookies
=head1 VERSION
-version 3.27
+version 3.28
=head1 SYNOPSIS
@@ -149,10 +151,14 @@
PerlSetVar WhatEverSessionTimeout +30m
# to enable the HttpOnly cookie property, use HttpOnly.
- # this is an MS extension. See:
+ # This is an MS extension. See:
# http://msdn.microsoft.com/workshop/author/dhtml/httponly_cookies.asp
PerlSetVar WhatEverHttpOnly 1
+ # to enable the SameSite cookie property, set SameSite to "lax" or "strict".
+ # See: https://www.owasp.org/index.php/SameSite
+ PerlSetVar WhatEverSameSite strict
+
# Usually documents are uncached - turn off here
PerlSetVar WhatEverCache 1
@@ -454,8 +460,6 @@
where CODE is a valid code from Apache2::Const
-=encoding UTF-8
-
=head1 ENCODING AND CHARACTER SETS
=head2 Encoding
@@ -684,13 +688,17 @@
=head1 SOURCE
-The development version is on github at
L<http://github.com/mschout/apache-authcookie>
-and may be cloned from L<git://github.com/mschout/apache-authcookie.git>
+The development version is on github at
L<https://https://github.com/mschout/apache-authcookie>
+and may be cloned from
L<git://https://github.com/mschout/apache-authcookie.git>
=head1 BUGS
-Please report any bugs or feature requests to
[email protected] or through the web interface at:
- http://rt.cpan.org/Public/Dist/Display.html?Name=Apache-AuthCookie
+Please report any bugs or feature requests on the bugtracker website
+L<https://github.com/mschout/apache-authcookie/issues>
+
+When submitting a bug or request, please include a test-file or a
+patch to an existing test-file that illustrates the bug or desired
+feature.
=head1 AUTHOR
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Apache-AuthCookie-3.27/lib/Apache2_4/AuthCookie.pm
new/Apache-AuthCookie-3.28/lib/Apache2_4/AuthCookie.pm
--- old/Apache-AuthCookie-3.27/lib/Apache2_4/AuthCookie.pm 2017-07-28
17:49:15.000000000 +0200
+++ new/Apache-AuthCookie-3.28/lib/Apache2_4/AuthCookie.pm 2019-11-19
16:36:52.000000000 +0100
@@ -1,5 +1,5 @@
package Apache2_4::AuthCookie;
-$Apache2_4::AuthCookie::VERSION = '3.27';
+$Apache2_4::AuthCookie::VERSION = '3.28';
# ABSTRACT: Perl Authentication and Authorization via cookies for Apache 2.4
use strict;
@@ -52,13 +52,15 @@
=pod
+=encoding UTF-8
+
=head1 NAME
Apache2_4::AuthCookie - Perl Authentication and Authorization via cookies for
Apache 2.4
=head1 VERSION
-version 3.27
+version 3.28
=head1 SYNOPSIS
@@ -84,10 +86,14 @@
PerlSetVar WhatEverSessionTimeout +30m
# to enable the HttpOnly cookie property, use HttpOnly.
- # this is an MS extension. See:
+ # This is an MS extension. See:
# http://msdn.microsoft.com/workshop/author/dhtml/httponly_cookies.asp
PerlSetVar WhatEverHttpOnly 1
+ # to enable the SameSite cookie property, set SameSite to "lax" or "strict".
+ # See: https://www.owasp.org/index.php/SameSite
+ PerlSetVar WhatEverSameSite strict
+
# Usually documents are uncached - turn off here
PerlSetVar WhatEverCache 1
@@ -358,8 +364,6 @@
where CODE is a valid code from Apache2::Const
-=encoding UTF-8
-
=head1 EXAMPLE
For an example of how to use C<Apache2_4::AuthCookie>, you may want to check
@@ -646,13 +650,17 @@
=head1 SOURCE
-The development version is on github at
L<http://github.com/mschout/apache-authcookie>
-and may be cloned from L<git://github.com/mschout/apache-authcookie.git>
+The development version is on github at
L<https://https://github.com/mschout/apache-authcookie>
+and may be cloned from
L<git://https://github.com/mschout/apache-authcookie.git>
=head1 BUGS
-Please report any bugs or feature requests to
[email protected] or through the web interface at:
- http://rt.cpan.org/Public/Dist/Display.html?Name=Apache-AuthCookie
+Please report any bugs or feature requests on the bugtracker website
+L<https://github.com/mschout/apache-authcookie/issues>
+
+When submitting a bug or request, please include a test-file or a
+patch to an existing test-file that illustrates the bug or desired
+feature.
=head1 AUTHOR
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Apache-AuthCookie-3.27/t/author-signature.t
new/Apache-AuthCookie-3.28/t/author-signature.t
--- old/Apache-AuthCookie-3.27/t/author-signature.t 1970-01-01
01:00:00.000000000 +0100
+++ new/Apache-AuthCookie-3.28/t/author-signature.t 2019-11-19
16:36:52.000000000 +0100
@@ -0,0 +1,21 @@
+#!perl -w
+
+BEGIN {
+ unless ($ENV{AUTHOR_TESTING}) {
+ print qq{1..0 # SKIP these tests are for testing by the author\n};
+ exit
+ }
+}
+
+# This file was automatically generated by
Dist::Zilla::Plugin::AuthorSignatureTest
+
+use strict;
+use warnings;
+use Test::More;
+
+unless (eval { require Test::Signature; 1 }) {
+ plan skip_all => 'Test::Signature is required for this test';
+}
+
+Test::Signature::signature_ok();
+done_testing;
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Apache-AuthCookie-3.27/t/conf/extra.conf.in
new/Apache-AuthCookie-3.28/t/conf/extra.conf.in
--- old/Apache-AuthCookie-3.27/t/conf/extra.conf.in 2017-07-28
17:49:15.000000000 +0200
+++ new/Apache-AuthCookie-3.28/t/conf/extra.conf.in 2019-11-19
16:36:52.000000000 +0100
@@ -261,6 +261,28 @@
</IfDefine>
</Files>
+# login action that sets SameSite
+<Files LOGIN-SAMESITE>
+ PerlSetVar WhatEverSameSite strict
+ AuthName WhatEver
+ SetHandler perl-script
+ <IfDefine APACHE1>
+ AuthType Sample::Apache::AuthCookieHandler
+ PerlHandler Sample::Apache::AuthCookieHandler->login
+ </IfDefine>
+ <IfDefine APACHE2>
+ <IfDefine !APACHE2_4>
+ AuthType Sample::Apache2::AuthCookieHandler
+ PerlResponseHandler Sample::Apache2::AuthCookieHandler->login
+ </IfDefine>
+ <IfDefine APACHE2_4>
+ AuthType Sample::Apache2_4::AuthCookieHandler
+ PerlResponseHandler Sample::Apache2_4::AuthCookieHandler->login
+ Require all granted
+ </IfDefine>
+ </IfDefine>
+</Files>
+
<Files logout.pl>
AuthName WhatEver
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/Apache-AuthCookie-3.27/t/real.t
new/Apache-AuthCookie-3.28/t/real.t
--- old/Apache-AuthCookie-3.27/t/real.t 2017-07-28 17:49:15.000000000 +0200
+++ new/Apache-AuthCookie-3.28/t/real.t 2019-11-19 16:36:52.000000000 +0100
@@ -16,7 +16,7 @@
Apache::TestRequest::user_agent( reset => 1, requests_redirectable => 0 );
-plan tests => 33, need_lwp;
+plan tests => 34, need_lwp;
ok 1, 'Test initialized';
@@ -338,6 +338,26 @@
is($r->code, 302, 'check redirect response code');
};
+
+# Should succeed and cookie should have SameSite attribute
+subtest 'SameSite cookie attribute' => sub {
+ plan tests => 3;
+
+ my $r = POST('/LOGIN-SAMESITE', [
+ destination => '/docs/protected/get_me.html',
+ credential_0 => 'programmer',
+ credential_1 => 'Heroo'
+ ]);
+
+ is($r->header('Location'), '/docs/protected/get_me.html',
+ 'SameSite location header');
+
+ is($r->header('Set-Cookie'),
+ 'Sample::AuthCookieHandler_WhatEver=programmer:Heroo; path=/;
SameSite=strict',
+ 'cookie contains SameSite attribute');
+
+ is($r->code, 302, 'check redirect response code');
+};
# test SessionTimeout
subtest 'session timeout' => sub {
