You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
122 lines
3.5 KiB
122 lines
3.5 KiB
# frozen_string_literal: true
|
|
require_relative "models"
|
|
require_relative "views"
|
|
|
|
require "roda"
|
|
|
|
module RankKing
|
|
class App < Roda
|
|
opts[:check_dynamic_arity] = false
|
|
opts[:check_arity] = :warn
|
|
|
|
plugin :default_headers,
|
|
"Content-Type" => "text/html",
|
|
# "Strict-Transport-Security" => "max-age=16070400;", # Uncomment if only allowing https:// access
|
|
"X-Frame-Options" => "deny",
|
|
"X-Content-Type-Options" => "nosniff",
|
|
"X-XSS-Protection" => "1; mode=block"
|
|
|
|
plugin :content_security_policy do |csp|
|
|
csp.default_src :none
|
|
# csp.style_src :self, "https://cdn.jsdelivr.net"
|
|
csp.form_action :self
|
|
csp.script_src :self
|
|
csp.connect_src :self
|
|
csp.base_uri :none
|
|
csp.frame_ancestors :none
|
|
end
|
|
|
|
# css_opts = {cache: false, style: :compressed}
|
|
# :nocov:
|
|
# if ENV["RACK_ENV"] == 'development'
|
|
# css_opts.merge!(source_map_embed: true, source_map_contents: true, source_map_file: ".")
|
|
# end
|
|
# plugin :render_coverage if defined?(SimpleCov)
|
|
# :nocov:
|
|
|
|
plugin :route_csrf
|
|
plugin :flash
|
|
# plugin :assets, css: "app.scss", css_opts: css_opts, timestamp_paths: true
|
|
# plugin :render, escape: true, layout: "./layout", :template_opts=>{chain_appends: !defined?(SimpleCov), freeze: true, skip_compiled_encoding_detection: true}
|
|
# plugin :public
|
|
plugin :Integer_matcher_max
|
|
plugin :typecast_params_sized_integers, sizes: [64], default_size: 64
|
|
# plugin :hash_branch_view_subdir
|
|
plugin :custom_block_results
|
|
|
|
logger = if ENV["RACK_ENV"] == "test"
|
|
Class.new{def write(_) end}.new
|
|
else
|
|
$stderr
|
|
end
|
|
plugin :common_logger, logger
|
|
|
|
plugin :not_found do
|
|
@page_title = "File Not Found"
|
|
view(content: "")
|
|
end
|
|
|
|
if ENV["RACK_ENV"] == "development"
|
|
plugin :exception_page
|
|
class RodaRequest
|
|
def assets
|
|
exception_page_assets
|
|
super
|
|
end
|
|
end
|
|
else
|
|
def self.freeze
|
|
Sequel::Model.freeze_descendents
|
|
DB.freeze
|
|
super
|
|
end
|
|
end
|
|
|
|
plugin :error_handler do |e|
|
|
case e
|
|
when Roda::RodaPlugins::RouteCsrf::InvalidToken
|
|
@page_title = "Invalid Security Token"
|
|
response.status = 400
|
|
view(content: "<p>An invalid security token was submitted with this request, and this request could not be processed.</p>")
|
|
else
|
|
$stderr.print "#{e.class}: #{e.message}\n"
|
|
$stderr.puts e.backtrace
|
|
next exception_page(e, assets: true) if ENV["RACK_ENV"] == "development"
|
|
# @page_title = "Internal Server Error"
|
|
# view(content: "")
|
|
end
|
|
end
|
|
|
|
plugin :sessions,
|
|
key: "_App.session",
|
|
#cookie_options: {secure: ENV['RACK_ENV'] != 'test'}, # Uncomment if only allowing https:// access
|
|
secret: ENV.send((ENV["RACK_ENV"] == "development" ? :[] : :delete), "APP_SESSION_SECRET")
|
|
|
|
# if Unreloader.autoload?
|
|
# plugin :autoload_hash_branches
|
|
# autoload_hash_branch_dir("./routes")
|
|
# end
|
|
# Unreloader.autoload("routes", delete_hook: proc{|f| hash_branch(File.basename(f).delete_suffix(".rb"))}){}
|
|
|
|
# def render(view, layout=Views::Layout.new)
|
|
# component.call
|
|
# end
|
|
|
|
route do |r|
|
|
# r.public
|
|
# r.assets
|
|
check_csrf!
|
|
|
|
r.root do
|
|
Views::Layout.new(Views::Hello.new(name: "Bob")).call
|
|
end
|
|
|
|
r.on "pools" do
|
|
r.is "new" do
|
|
Views::Layout.new(Views::NewPool.new).call
|
|
end
|
|
end
|
|
end
|
|
end
|
|
end
|