CookieMonster

This library exists to help you handle encrypted cookies in your app(s). The goal is for the implementation to be simple and dependency free so that it can be used anywhere.

gem install cookie_monster

or add the following line to Gemfile:

gem 'cookie_monster'

and run bundle install from your shell.

CookieMonster is configured by passing a block to CookieMonster.configure like the following:

CookieMonster.configure do |config|
  config.key = '6e14e0255e472f84ef99df899cf9158aa3215a919db1ba0fa460eb928da3b34265a98d93bb4593762b0404494c7f1ab60f62b75eb'
end

The object yielded by CookieMonster.configure accepts two methods: key and cipher_type. key is the key that will unlock all the cookies, so keep this secret! It should also be long. If you're using CookieMonster across multiple apps, make sure that the key is the same. cipher_type defaults to 'AES-256-CBC', but can be anything in the list of OpenSSL::Cipher.ciphers

If you're on rails, using CookieMonster is as easy as including the appropriate module into your controller:

include CookieMonster::Rails

This includes a method cookie_monster which behaves just like cookies. You can access cookies with [] and set them with []=:

class SecretsController < ApplicationController
  # ...
  def update
    cookie_monster[:super_secret_thing] = 'hopefully no one reads this'
  end

  def show
    @secret = cookie_monster[:super_secret_thing]
  end
  # ...
end

Otherwise, you need to instantiate a new CookieMonster::Jar object with a request and response objects. request and response should both respond to cookies, and response should also respond to set_cookie. You can also provide options for the cookie setting. This could look like the following:

def cookie_monster
  @cookie_monster ||= CookieMonster::Jar.new(request: request, response: response, expires: 1.day.from_now)
end

CookieMonster requires at least Ruby 1.9. It is tested against Ruby 1.9.2, \1.9.3, and JRuby in 19-mode.

Contributing to CookieMonster:

1. Fork the official repository.
2. Make your changes in a topic branch.
3. Send a pull request.

Notes:

• Contributions without tests won't be accepted.
• Please don't update the Gem version.

cookie_monster is Copyright © 2013 Dylan Griffin and Shareaholic, Inc. It is free software, and may be redistributed under the terms specified in the LICENSE file.