0.22

Author: miyagawa

Build.PL

@@ -1,3 +1,4 @@
+# This Build.PL for Plack-Middleware-Session was generated by Dist::Zilla::Plugin::ModuleBuildTiny 0.006.
 use 5.006;
-use Module::Build::Tiny 0.030;
+use Module::Build::Tiny 0.037;
 Build_PL();

Changes

@@ -2,6 +2,11 @@ Revision history for Perl extension Plack::Middleware::Session
 
 {{$NEXT}}
 
+0.22  2014-08-11 10:16:51 PDT
+        - Document the vunlerability of using this middleware without secret, and
+          warn when secret is not set on the runtime. In the next release the default
+          will be changed to require the secret. (mala)
+
 0.21  2013-10-12 11:41:37 PDT
         - use Cookie::Baker (kazeburo)
 

META.json

@@ -4,7 +4,7 @@
       "Tatsuhiko Miyagawa"
    ],
    "dynamic_config" : 0,
-   "generated_by" : "Dist::Milla version v1.0.4, Dist::Zilla version 4.300039, CPAN::Meta::Converter version 2.132830",
+   "generated_by" : "Dist::Milla version v1.0.5, Dist::Zilla version 5.020, CPAN::Meta::Converter version 2.142060",
    "license" : [
       "perl_5"
    ],
@@ -26,7 +26,7 @@
    "prereqs" : {
       "configure" : {
          "requires" : {
-            "Module::Build::Tiny" : "0.030"
+            "Module::Build::Tiny" : "0.037"
          }
       },
       "develop" : {
@@ -64,7 +64,7 @@
          "web" : "https://github.com/stevan/plack-middleware-session"
       }
    },
-   "version" : "0.21",
+   "version" : "0.22",
    "x_contributors" : [
       "Graham Knop <[email protected]>",
       "Lee Aylward <[email protected]>",

README.md

@@ -39,40 +39,40 @@ It should be noted that we store the current session as a hash
 reference in the `psgix.session` key inside the `$env` where you can
 access it as needed.
 
-__NOTE:__ As of version 0.04 the session is stored in `psgix.session`
+**NOTE:** As of version 0.04 the session is stored in `psgix.session`
 instead of `plack.session`.
 
 ## State
 
-- [Plack::Session::State](http://search.cpan.org/perldoc?Plack::Session::State)
+- [Plack::Session::State](https://metacpan.org/pod/Plack::Session::State)
 
     This will maintain session state by passing the session through
     the request params. It does not do this automatically though,
     you are responsible for passing the session param.
 
-- [Plack::Session::State::Cookie](http://search.cpan.org/perldoc?Plack::Session::State::Cookie)
+- [Plack::Session::State::Cookie](https://metacpan.org/pod/Plack::Session::State::Cookie)
 
     This will maintain session state using browser cookies.
 
 ## Store
 
-- [Plack::Session::Store](http://search.cpan.org/perldoc?Plack::Session::Store)
+- [Plack::Session::Store](https://metacpan.org/pod/Plack::Session::Store)
 
     This is your basic in-memory session data store. It is volatile storage
     and not recommended for multiprocessing environments. However it is
     very useful for development and testing.
 
-- [Plack::Session::Store::File](http://search.cpan.org/perldoc?Plack::Session::Store::File)
+- [Plack::Session::Store::File](https://metacpan.org/pod/Plack::Session::Store::File)
 
     This will persist session data in a file. By default it uses
-    [Storable](http://search.cpan.org/perldoc?Storable) but it can be configured to have a custom serializer and
+    [Storable](https://metacpan.org/pod/Storable) but it can be configured to have a custom serializer and
     deserializer.
 
-- [Plack::Session::Store::Cache](http://search.cpan.org/perldoc?Plack::Session::Store::Cache)
+- [Plack::Session::Store::Cache](https://metacpan.org/pod/Plack::Session::Store::Cache)
 
-    This will persist session data using the [Cache](http://search.cpan.org/perldoc?Cache) interface.
+    This will persist session data using the [Cache](https://metacpan.org/pod/Cache) interface.
 
-- [Plack::Session::Store::Null](http://search.cpan.org/perldoc?Plack::Session::Store::Null)
+- [Plack::Session::Store::Null](https://metacpan.org/pod/Plack::Session::Store::Null)
 
     Sometimes you don't care about storing session data, in that case
     you can use this noop module.
@@ -83,20 +83,20 @@ The following are options that can be passed to this module.
 
 - _state_
 
-    This is expected to be an instance of [Plack::Session::State](http://search.cpan.org/perldoc?Plack::Session::State) or an
+    This is expected to be an instance of [Plack::Session::State](https://metacpan.org/pod/Plack::Session::State) or an
     object that implements the same interface. If no option is provided
-    the default [Plack::Session::State::Cookie](http://search.cpan.org/perldoc?Plack::Session::State::Cookie) will be used.
+    the default [Plack::Session::State::Cookie](https://metacpan.org/pod/Plack::Session::State::Cookie) will be used.
 
 - _store_
 
-    This is expected to be an instance of [Plack::Session::Store](http://search.cpan.org/perldoc?Plack::Session::Store) or an
+    This is expected to be an instance of [Plack::Session::Store](https://metacpan.org/pod/Plack::Session::Store) or an
     object that implements the same interface. If no option is provided
-    the default [Plack::Session::Store](http://search.cpan.org/perldoc?Plack::Session::Store) will be used.
+    the default [Plack::Session::Store](https://metacpan.org/pod/Plack::Session::Store) will be used.
 
     It should be noted that this default is an in-memory volatile store
     is only suitable for development (or single process servers). For a
-    more robust solution see [Plack::Session::Store::File](http://search.cpan.org/perldoc?Plack::Session::Store::File) or
-    [Plack::Session::Store::Cache](http://search.cpan.org/perldoc?Plack::Session::Store::Cache).
+    more robust solution see [Plack::Session::Store::File](https://metacpan.org/pod/Plack::Session::Store::File) or
+    [Plack::Session::Store::Cache](https://metacpan.org/pod/Plack::Session::Store::Cache).
 
 # BUGS
 

lib/Plack/Middleware/Session.pm

@@ -2,7 +2,7 @@ package Plack::Middleware::Session;
 use strict;
 use warnings;
 
-our $VERSION   = '0.21';
+our $VERSION   = '0.22';
 our $AUTHORITY = 'cpan:STEVAN';
 
 use Plack::Util;

lib/Plack/Session.pm

@@ -2,7 +2,7 @@ package Plack::Session;
 use strict;
 use warnings;
 
-our $VERSION   = '0.21';
+our $VERSION   = '0.22';
 our $AUTHORITY = 'cpan:STEVAN';
 
 use Plack::Util::Accessor qw( session options );

lib/Plack/Session/State.pm

@@ -2,7 +2,7 @@ package Plack::Session::State;
 use strict;
 use warnings;
 
-our $VERSION   = '0.21';
+our $VERSION   = '0.22';
 our $AUTHORITY = 'cpan:STEVAN';
 
 use Digest::SHA1 ();

lib/Plack/Session/State/Cookie.pm

@@ -2,7 +2,7 @@ package Plack::Session::State::Cookie;
 use strict;
 use warnings;
 
-our $VERSION   = '0.21';
+our $VERSION   = '0.22';
 our $AUTHORITY = 'cpan:STEVAN';
 
 use parent 'Plack::Session::State';

lib/Plack/Session/Store.pm

@@ -2,7 +2,7 @@ package Plack::Session::Store;
 use strict;
 use warnings;
 
-our $VERSION   = '0.21';
+our $VERSION   = '0.22';
 our $AUTHORITY = 'cpan:STEVAN';
 
 use Plack::Util::Accessor qw[ _stash ];

lib/Plack/Session/Store/Cache.pm

@@ -2,7 +2,7 @@ package Plack::Session::Store::Cache;
 use strict;
 use warnings;
 
-our $VERSION   = '0.21';
+our $VERSION   = '0.22';
 our $AUTHORITY = 'cpan:STEVAN';
 
 use Scalar::Util qw[ blessed ];