grimen / rack-iframe

Rack middleware for enabling problematic web browsers (Internet Explorer and Safari) to use same cookies in iframes as in parent windows.

RACK-IFRAME

Rack middleware for enabling problematic web browsers (Internet Explorer and Safari) to use same cookies in iframes as in parent windows.

Background

Best described via:

• http://tempe.st/tag/ruby-on-rails
• http://groups.google.com/group/rack-devel/browse_thread/thread/11da5971522b107b
• http://grack.com/blog/2010/01/06/3rd-party-cookies-dom-storage-and-privacy
• http://anantgarg.com/2010/02/18/cross-domain-cookies-in-safari

Installation

Add to your Gemfile:

  gem 'rack-iframe'

…and bundle install.

Usage

Minimal:

  require 'rack/iframe'

  use Rack::Iframe

Custom – P3P header:

  require 'rack/iframe'

  use Rack::Iframe, :p3p => %(CP="NOI DSP LAW NID")

Test

  $ bundle exec rake test

…or using Guard:

  $ bundle exec guard

Notes

This gem was developed for our own requirements at Merchii, so feel free to send pull-requests with enhancements of any kind (features, bug-fixes, documentation, tests, etc.) to make it better or useful for you as well.

To-Do

Still not ready for prime-time. See TODO.

License

Released under the MIT license.
Copyright © Jonas Grimfelt, Jaakko Suutarla, Merchii

rack-iframe's Issues

Facebook Tab application on Safari

Is this supposed to work for Facebook Tab applications on Safari 6.0.2 ?
I didn't get this to work with a Rails 3.2.8 app and Safari 6.0.2. I'm wondering if I'm doing it wrong, if this middleware isn't supposed to solve my issue or if it's broken. To be clear, the issue is that Safari won't maintain a session in a Facebook Tab application.

For clarity my output of rake middleware in development

use ActionDispatch::Static
use Rack::Lock
use #<ActiveSupport::Cache::Strategy::LocalCache::Middleware:0x007fec12eadcc8>
use Rack::Runtime
use Rack::MethodOverride
use ActionDispatch::RequestId
use Rack::Iframe
use Rails::Rack::Logger
use ActionDispatch::ShowExceptions
use ActionDispatch::DebugExceptions
use ActionDispatch::RemoteIp
use ActionDispatch::Reloader
use ActionDispatch::Callbacks
use ActiveRecord::ConnectionAdapters::ConnectionManagement
use ActiveRecord::QueryCache
use ActionDispatch::Cookies
use ActionDispatch::Session::CookieStore
use ActionDispatch::Flash
use ActionDispatch::ParamsParser
use ActionDispatch::Head
use Rack::ConditionalGet
use Rack::ETag
use ActionDispatch::BestStandardsSupport
run App::Application.routes