Skip to content

Releases: redis-store/redis-rack

Update to Rack 2.0.8

13 Jan 21:51
Compare
Choose a tag to compare

This release adds support for Rack v2.0.8+, which was released a few weeks ago to address a session hijack vulnerability caused by a timing attack on the session store. Major shoutouts to @le0pard for implementing it and all of the reviewers who contributed suggestions and comments. If you use Redis to store your Rack session, you'll want to update redis-rack and possibly redis-actionpack if you're using Rails as well.

Support New Rack APIs

18 Sep 16:27
Compare
Choose a tag to compare
Support New Rack APIs Pre-release
Pre-release

This changes the underlying API from using the legacy Rack::Session::Abstract::ID to Rack::Session::Abstract::Persisted, in order to bring it in line with the abstract cache stores provided by Rails that make use of this gem as a backend. As a consequence, this also drops support for Rack 2, so this prerelease is designed to give it a shot in the wild without affecting too many machines, we'll release a full v2.1.0 update in the coming weeks.

Fix nil options in connection pool

18 Sep 16:24
Compare
Choose a tag to compare

A quick bugfix to address #44

Blank Sessions Bugfix

18 Sep 16:25
Compare
Choose a tag to compare

Prevents Redis::Rack from storing blank session data.

redis-actionpack dependency hell

18 Sep 16:23
Compare
Choose a tag to compare

Due to the 2.x release's dependency on Rack 2.0, we need to release this new minor version to keep redis-store up to date without losing the connection to rails 5.