Commit Graph

684 Commits

Author SHA1 Message Date
fatkodima
4efbbc844b Add support for connection pooling on RedisCacheStore 2018-01-22 13:54:00 -05:00
Julien Meichelbeck
e0f0d717d6 Support hash as first argument in assert_difference. (#31600)
* Support hash as first argument for `assert_difference`.

This allows to specify multiple numeric differences in the same assertion.
Example:

    assert_difference 'Article.count' => 1, 'Notification.count' => 2 do
      # post :create, params: { article: {...} }
    end

* Support error message when passing a hash as a first parameter

* Format CHANGELOG properly

[Julien Meichelbeck + Rafael Mendonça França]
2018-01-18 15:20:34 -05:00
Sean Griffin
f8afb5168a
Merge pull request #31651 from eugeneius/use_sha1_digests
Use SHA-1 for non-sensitive digests by default
2018-01-12 15:03:32 -07:00
Ryuta Kamizono
2a934aa3c9 Merge pull request #30268 from ignatiusreza/instrumentation
add instrumentation for read_multi
2018-01-11 09:14:56 +09:00
Eugene Kenny
d034f488f9 Use SHA-1 for non-sensitive digests by default
Instead of providing a configuration option to set the hash function,
switch to SHA-1 for new apps and allow upgrading apps to opt in later
via `new_framework_defaults_5_2.rb`.
2018-01-08 20:45:46 +00:00
Ryuta Kamizono
cb86b95b60 Merge pull request #31011 from danielma/dma/assert-changes-with-to-should-still-assert-change
`assert_changes` should always assert some change
2018-01-04 23:14:51 +09:00
Ignatius Reza
62023884f7 add instrumentation for read_multi
currently it's not possible to know what the hit rates are from read_multi
2017-12-29 10:12:32 +09:00
Eugene Kenny
b9e7c676ca Don't include ellipsis in truncated digest output
Using `truncate` to limit the length of the digest has the unwanted side
effect of adding an ellipsis when the input is longer than the limit.

Also:
 - Don't instantiate a new object for every digest
 - Rename the configuration option to `hash_digest_class`
 - Update the CHANGELOG entry to describe how to use the feature
2017-12-17 00:49:02 +00:00
Eileen M. Uchitelle
659c516bef
Merge pull request #31289 from witlessbird/fips-compatibility
Initial support for running Rails on FIPS-certified systems
2017-12-14 09:58:33 -05:00
Dmitri Dolguikh
82822a3421 Introduced ActiveSupport::Digest that allows to specify hash function implementation
and defaults to `Digest::MD5`.

Replaced calls to `::Digest::MD5.hexdigest` with calls to `ActiveSupport::Digest.hexdigest`.
2017-12-12 11:23:54 -08:00
Mehmet Emin INAC
17b9c264cb
[ci skip] Fix Active Support Changelog about :race_condition_ttl 2017-12-12 15:18:59 +01:00
Rafael Mendonça França
2837d0f334
Preparing for 5.2.0.beta2 release 2017-11-28 14:41:02 -05:00
Rafael Mendonça França
cceeeb6e57
Preparing for 5.2.0.beta1 release 2017-11-27 14:50:03 -05:00
Rafael Mendonça França
0623b5d194
Merge pull request #24510 from vipulnsward/make-variable_size_secure_compare-public
Make variable_size_secure_compare public
2017-11-25 11:39:37 -05:00
Chris LaRose
078421bacb Make ActiveSupport::TimeZone.all independent of previous lookups (#31176) 2017-11-22 17:12:08 +00:00
Takumasa Ochi
b22ee64b5b
MemCacheStore: Support expiring counters
Support `expires_in` in `ActiveSupport::Cache::MemCacheStore#increment`
and `#decrement`.

Closes #30716.
2017-11-20 14:49:11 -08:00
Andrew White
2eea6458a1 Handle TZInfo::AmbiguousTime errors
Make `ActiveSupport::TimeWithZone` match Ruby's handling of ambiguous
times by choosing the later period, e.g.

Ruby:
```
ENV["TZ"] = "Europe/Moscow"
Time.local(2014, 10, 26, 1, 0, 0)   # => 2014-10-26 01:00:00 +0300
```

Before:
```
>> "2014-10-26 01:00:00".in_time_zone("Moscow")
TZInfo::AmbiguousTime: 26/10/2014 01:00 is an ambiguous local time.
```

After:
```
>> "2014-10-26 01:00:00".in_time_zone("Moscow")
=> Sun, 26 Oct 2014 01:00:00 MSK +03:00
```

Fixes #17395.
2017-11-15 09:48:50 +00:00
bogdanvlviv
703478d3f1
Fix activesupport/CHANGELOG.md [ci skip] 2017-11-14 21:17:10 +00:00
Jeremy Daer
ed10016687 Cache: Enable compression by default for values > 1kB.
Compression has long been available, but opt-in and at a 16kB threshold.
It wasn't enabled by default due to CPU cost. Today it's cheap and
typical cache data is eminently compressible, such as HTML or JSON
fragments.

Compression dramatically reduces Memcached/Redis mem usage, which means
the same cache servers can store more data, which means higher hit
rates.

To disable compression, pass `compress: false` to the initializer.
2017-11-13 22:02:45 -07:00
Jeremy Daer
9f8ec35352 Built-in Redis cache store
* Supports vanilla Redis, hiredis, and Redis::Distributed.
* Supports Memcached-like sharding across Redises with Redis::Distributed.
* Fault tolerant. If the Redis server is unavailable, no exceptions are
  raised. Cache fetches are treated as misses and writes are dropped.
* Local cache. Hot in-memory primary cache within block/middleware scope.
* `read_/write_multi` support for Redis mget/mset. Use Redis::Distributed
  4.0.1+ for distributed mget support.
* `delete_matched` support for Redis KEYS globs.
2017-11-13 19:45:47 -07:00
Daniel Ma
af0361da0a assert_changes should always assert some change
While using `assert_changes`, I came across some unexpected behavior:
if you provide a `to:` argument, and the expression matches but didn't
actually change, the assertion will pass.

The way `assert_changes` reads, I assumed that it would both assert
that there was any change at all, _and_ that the expression changed to
match my `to:` argument.

In the case of just a `from:` argument, `assert_changes` does what I
expect as well. It asserts that the before value `=== from` and that
the after value changed.

My key change is that `assert_changes` will now _always_ assert that
expression changes, no matter what combination of `from:` and `to:`
arguments
2017-11-13 11:49:35 -08:00
Ryuta Kamizono
a7ef60d520 ✂️
[ci skip]
2017-11-10 21:18:53 +09:00
Andrew White
2b434d6f79 Allow Range#include? on TWZ ranges
In #11474 we prevented TWZ ranges being iterated over which matched
Ruby's handling of Time ranges and as a consequence `include?` stopped
working with both Time ranges and TWZ ranges. However in
ruby/ruby@b061634 support was added for `include?` to use `cover?` for
'linear' objects. Since we have no way of making Ruby consider TWZ
instances as 'linear' we have to override `Range#include?`.

Fixes #30799.
2017-11-08 10:33:34 +00:00
Andrew White
0ddde0a8fc Fix acronym support in humanize
Acronym inflections are stored with lowercase keys in the hash but
the match wasn't being lowercased before being looked up in the hash.
This shouldn't have any performance impact because before it would
fail to find the acronym and perform the `downcase` operation anyway.

Fixes #31052.
2017-11-06 14:47:47 +00:00
bogdanvlviv
ee9d81837b
Allows pass argument for Time#prev_year and Time#next_year. 2017-10-24 21:17:54 +03:00
bogdanvlviv
f2c1e3a793
Allows pass argument for Time#prev_month and Time#next_month 2017-10-24 21:17:54 +03:00
bogdanvlviv
61ac2167ef
Allows pass argument for Time#prev_day and Time#next_day 2017-10-24 21:17:54 +03:00
Rafael Mendonça França
9c5c0596f1
Merge pull request #30953 from rohitpaulk/fix-io-to-json
Fix #to_json for IO objects, fixes #26132
2017-10-23 15:33:16 -04:00
Rafael Mendonça França
19fbbebb16
Remove deprecated halt_callback_chains_on_return_false option 2017-10-23 12:51:05 -04:00
Rafael Mendonça França
c792354adc
Remove deprecated :if and :unless string filter for callbacks 2017-10-23 12:51:04 -04:00
Paul Kuruvilla
813f8e333d Fix #to_json for unreadable IO objects, fixes #26132 2017-10-23 15:49:00 +05:30
Akira Matsuda
01ae396602 Let Hash#slice return a Hash
In order to keep this method compatible with the Ruby 2.5 version of Hash#slice.
This bahavior is actually slightly incompatibile with previous versions of Active Support
but it might not cause a real problem, since HWIA, the biggest use case of Hash subclassing here,
already overrides `slice` to return another HWIA.
2017-10-21 17:44:26 +09:00
Ryuta Kamizono
fced30c373 Cleanup CHANGELOGs [ci skip]
* Add missing credit
* Add backticks
* Fix indentation
* Remove trailing spaces

And some minor tweaks.
2017-10-04 07:27:33 +09:00
Kasper Timm Hansen
fbcc4bfe9a
Deprecate secret_token, long since usurped by secret_key_base.
See the changelog entry.

Remove `secrets.secret_token` from the bug report templates,
since we don't accept bug reports for Rails versions that
don't support a `secret_key_base`.

[ claudiob & Kasper Timm Hansen ]
2017-09-28 20:46:01 +02:00
yuuji.yaginuma
de9e3238a0 Ensure HashWithIndifferentAccess#transform_keys to return HashWithIndifferentAccess
Currently, `#transform_values`, `#select` and `#reject` return instance
of `HashWithIndifferentAccess`. But `#transform_keys` returns instance
of Hash. This behavior is a bit confusing.

I think that `HashWithIndifferentAccess#transform_keys` should also return
instance of `HashWithIndifferentAccess` as well as other methods.
2017-09-27 14:02:12 +09:00
Michael Coyne
39f8ca64ce Add key rotation message Encryptor and Verifier
Both classes now have a rotate method where new instances are added for
each call. When decryption or verification fails the next rotation
instance is tried.
2017-09-23 17:16:21 -04:00
bogdanvlviv
9e4827a8ae
Deprecate Module#reachable? method 2017-09-17 02:20:02 +03:00
David Heinemeier Hansson
69f976b859 Add credentials using a generic EncryptedConfiguration class (#30067)
* WIP: Add credentials using a generic EncryptedConfiguration class

This is sketch code so far.

* Flesh out EncryptedConfiguration and test it

* Better name

* Add command and generator for credentials

* Use the Pathnames

* Extract EncryptedFile from EncryptedConfiguration and add serializers

* Test EncryptedFile

* Extract serializer validation

* Stress the point about losing comments

* Allow encrypted configuration to be read without parsing for display

* Use credentials by default and base them on the master key

* Derive secret_key_base in test/dev, source it from credentials in other envs

And document the usage.

* Document the new credentials setup

* Stop generating the secrets.yml file now that we have credentials

* Document what we should have instead

Still need to make it happen, tho.

* [ci skip] Keep wording to `key base`; prefer defaults.

Usually we say we change defaults, not "spec" out a release.

Can't use backticks in our sdoc generated documentation either.

* Abstract away OpenSSL; prefer MessageEncryptor.

* Spare needless new when raising.

* Encrypted file test shouldn't depend on subclass.

* [ci skip] Some woordings.

* Ditch serializer future coding.

* I said flip it. Flip it good.

* [ci skip] Move require_master_key to the real production.rb.

* Add require_master_key to abort the boot process.

In case the master key is required in a certain environment
we should inspect that the key is there and abort if it isn't.

* Print missing key message and exit immediately.

Spares us a lengthy backtrace and prevents further execution.

I've verified the behavior in a test app, but couldn't figure the
test out as loading the app just exits immediately with:

```
/Users/kasperhansen/Documents/code/rails/activesupport/lib/active_support/testing/isolation.rb:23:in `load': marshal data too short (ArgumentError)
	from /Users/kasperhansen/Documents/code/rails/activesupport/lib/active_support/testing/isolation.rb:23:in `run'
	from /Users/kasperhansen/.rbenv/versions/2.4.1/lib/ruby/gems/2.4.0/gems/minitest-5.10.2/lib/minitest.rb:830:in `run_one_method'
	from /Users/kasperhansen/.rbenv/versions/2.4.1/lib/ruby/gems/2.4.0/gems/minitest-5.10.2/lib/minitest/parallel.rb:32:in `block (2 levels) in start'
```

It's likely we need to capture and prevent the exit somehow.
Kernel.stub(:exit) didn't work. Leaving it for tomorrow.

* Fix require_master_key config test.

Loading the app would trigger the `exit 1` per require_master_key's
semantics, which then aborted the test.

Fork and wait for the child process to finish, then inspect the
exit status.

Also check we aborted because of a missing master key, so something
else didn't just abort the boot.

Much <3 to @tenderlove for the tip.

* Support reading/writing configs via methods.

* Skip needless deep symbolizing.

* Remove save; test config reader elsewhere.

* Move secret_key_base check to when we're reading it.

Otherwise we'll abort too soon since we don't assign the secret_key_base
to secrets anymore.

* Add missing string literal comments; require unneeded yaml require.

* ya ya ya, rubocop.

* Add master_key/credentials after bundle.

Then we can reuse the existing message on `rails new bc4`.

It'll look like:

```
Using web-console 3.5.1 from https://github.com/rails/web-console.git (at master@ce985eb)
Using rails 5.2.0.alpha from source at `/Users/kasperhansen/Documents/code/rails`
Using sass-rails 5.0.6
Bundle complete! 16 Gemfile dependencies, 72 gems now installed.
Use `bundle info [gemname]` to see where a bundled gem is installed.
Adding config/master.key to store the master encryption key: 97070158c44b4675b876373a6bc9d5a0

Save this in a password manager your team can access.

If you lose the key, no one, including you, can access anything encrypted with it.

      create  config/master.key
```

And that'll be executed even if `--skip-bundle` was passed.

* Ensure test app has secret_key_base.

* Assign secret_key_base to app or omit.

* Merge noise

* Split options for dynamic delegation into its own method and use deep symbols to make it work

* Update error to point to credentials instead

* Appease Rubocop

* Validate secret_key_base when reading it.

Instead of relying on the validation in key_generator move that into
secret_key_base itself.

* Fix generator and secrets test.

Manually add config.read_encrypted_secrets since it's not there by default
anymore.

Move mentions of config/secrets.yml to config/credentials.yml.enc.

* Remove files I have no idea how they got here.

* [ci skip] swap secrets for credentials.

* [ci skip] And now, changelogs are coming.
2017-09-11 20:21:20 +02:00
Anton Khamets
e6c310b3f8 Test for the new exception of delegate_missing_to (#30191)
* Add test for the new exception of delegate_missing_to

* Add a changelog entry

* Only check for nil if NoMethodError was raised

* Make method private

* Have to pass both target name and value

* Inline the re-raise

[Rafael Mendonça França + Anton Khamets]
2017-08-12 18:23:17 -04:00
Jon Moss
026d4a2f07 Lint activesupport/CHANGELOG.md
Light grammar edits.

[ci skip]
2017-08-06 22:29:07 -04:00
Ryuta Kamizono
ec544350bb Add backticks around String#camelize
[ci skip]
2017-08-04 02:54:46 +09:00
Sean Griffin
13fd153429 Fix changelog format 2017-08-03 11:33:07 -04:00
Ricardo Díaz
1d65185c90 Update String#camelize to provide feedback when wrong option is passed
String#camelize was returning nil without any feedback when an
invalid option was passed as parameter. This update makes the method
to raises an ArgumentError when the option passed is invalid, similar
to what Ruby does for String#downcase (and others) in 2.4.1.

https://ruby-doc.org/core-2.4.1/String.html#method-i-downcase
2017-08-02 00:41:09 -05:00
Sayan Chakraborty
a54e13bd2e Add missing support for modulo operations on durations
Rails 5.1 introduce an `ActiveSupport::Duration::Scalar` class as
a wrapper around a numeric value as a way of ensuring a duration
was the outcome of an expression. However the implementation was
missing support for modulo operations. This commit adds support
for those operations and should result in a duration being
returned from expressions involving them.

Fixes #29603 and #29743.
2017-07-28 14:06:53 +01:00
Andrew White
bfa878d3b2 Fix division where a duration is the denominator
PR #29163 introduced a change in behavior when a duration was
the denominator in a calculation - this was incorrect as dividing
by a duration should always return a `Numeric`. The behavior of
previous versions of Rails has been restored.

Fixes #29592.
2017-07-27 13:41:44 +01:00
Kasper Timm Hansen
2ee46434e0
[ci skip] Remove superfluous paragraphs; fully qualify constants.
The paragraphs retread ground covered by the title and the usage examples,
so let's just remove them.

[ Assain Jaleel & Kasper Timm Hansen ]
2017-07-24 10:25:57 +02:00
Assain
97cd2df042 add to changelog: purpose and expiry support
[ci skip]
2017-07-24 13:45:34 +05:30
Sean Griffin
404eceba8c Merge branch 'master' into make-reverse-merge-bang-order-consistent 2017-07-17 07:10:27 -06:00
प्रथमेश Sonpatki
b6300f3ecc Added time helper method freeze_time which is an alias for travel_to Time.now (#29681) 2017-07-10 12:13:37 +02:00
Kasper Timm Hansen
36b349e387 [ci skip] Add changelog entry for 6d402c6
[ Assain Jaleel & Kasper Timm Hansen ]
2017-06-11 21:49:00 +02:00