- dancer-users - lists.preshweb.co.uk

Dynamic config setting upon startup [D1]
by Hermann Calabria 03 Jan '19

03 Jan '19

Hi all, I’m using Dancer::Session::Cookie and facing a bit of a conundrum with the session_cookie_key a setup in the config file. As we all know it’s not recommended to include live secrets in a git repository, so I’m attempting to create the session_cookie_key dynamically upon Dancer startup (documented here: https://metacpan.org/pod/Dancer::Config#SETTINGS) as follows: use Dancer; set session_cookie_key => crypto_nonce(20); ... dance; where crypto_nonce() is a cryptographically strong nonce generator (this approach happens to work for this particular app, because it’s an admin/dashboard panel with a small number of infrequent users, and the it runs on a single machine). I try to run the app, and get the following error: The setting session_cookie_key must be defined at /home/hermann/perl5/perlbrew/perls/perl-5.26.2/lib/site_perl/5.26.2/Dancer/Session/Cookie.pm line 38 So I add the following to environments/production.yml: session_cookie_key : “1” Try to run the app again, and not unexpectedly, I end up with session_cookie_key = 1. I can work around the problem by adding a hook: hook 'before' => sub { if ( length(config->{'session_cookie_key'}) < 5 ) { set session_cookie_key => crypto_nonce(20); } ... }; I’m wondering if there’s a more elegant way to accomplish what I’m trying to do? Thanks in advance! Hermann

1 0

New release of DPAE with return_url fixes
by Andrew Beverley 20 Dec '18

20 Dec '18

Dear all, I have just released a new version of Dancer2::Plugin::Auth::Extensible. This contains a number of changes to the return_url functionality (forwarding to a URL after login). In particular: - It fixes a medium-level security vulnerability, whereby return_url could be used for Open URL Redirection attacks[1] with links such as /login?return_url=http://news.bbc.co.uk/ - It fixes a problem with apps mounted on paths where the path was included twice (GH 82 & 74) I've tested fairly thoroughly and I don't think I've broken anything, but let me know if you experience any problems. Regards, Andy [1] https://portswigger.net/kb/issues/00500100_open-redirection-reflected

2 2

Is there an plugin that exists that uses autopage?
by Steve Dondley 23 Nov '18

23 Nov '18

I'm not having any success getting the autopage feature working with a plugin following the instructions in Dancer2::Manual. And placing a "register" method into my plugin causes a "Subrouting register redefined" warning. Wondering if there is a plugin out there that uses autopage so I can see how to properly implement it. Thanks. -- Prometheus Labor Communications, Inc. http://prometheuslabor.com 413-572-1300 UnionConnect Phone App for Labor Unions http://unionconnect.com

1 0

Injecting templates
by Zahir Lalani 21 Nov '18

21 Nov '18

Hi All Need some guidance as to the options available I currently have a module which renders a template as a whole page. I want to separate some stuff as its getting a little messy This module is called by a parent controller. I want the parent controller to effectively call a master template render, and into that template I want to inject the content generated by the above sub module. So to be clear: Current: Parent_controller Call sub_module Return template abc New Parent Controller $Inject = sub_module ; (renders a tt) Template xyz { parent_info = $x, inject_info = $inject } The parent template would simply then have a variable where the $inject output is replaced "template" is designed to render the whole page using layout - I am looking for something similar to the process template control of template toolkit. Hope I made myself clear Z

4 6

Unit testing plugins
by Steve Dondley 19 Nov '18

19 Nov '18

Ive been messing around with figuring out how to unit test plugins. I came up with something that works but that is very messy and hacky and so it feels like I'm way off the beaten path. Can someone set me straight on whether there is an easier way to peek into the inner data structures of a plugin? Here's what I came up with to dump the contents of my plugin's "html_cache" attribute: my $app = Dancer2::Core::App->new(); $app->with_plugins('Menu'); $app->plugins->[0]->menu_item( { title => 'blah' }, $app->add_route( method => 'get', regexp => '/test', code => sub { $app->template('index.tt', shift) } )); my $req = Dancer2::Core::Request->new( env => { SERVER_NAME => 'localhost', SERVER_PORT => 8000, } ); my $route = $app->routes->{get}->[0]; $req->{route} = $route; $req->{cookies} = { }; $app->{request} = $req; $route->execute($app); print Dumper $app->plugins->[0]->html_cache; Thanks! -- Prometheus Labor Communications, Inc. http://prometheuslabor.com 413-572-1300 UnionConnect Phone App for Labor Unions http://unionconnect.com

1 0

New Dancer2::Plugin::Menu module
by Steve Dondley 13 Nov '18

13 Nov '18

Quick announcement for a new module I wrote for automatically generating a simple HTML menu for a Dancer2 app. CPAN: https://metacpan.org/pod/release/STEVIED/Dancer2-Plugin-Menu-0.002/lib/Danc… GitHub: https://github.com/sdondley/Dancer2-Plugin-Menu Feedback and suggestions welcomed and appreciated. Thanks. -- Prometheus Labor Communications, Inc. http://prometheuslabor.com 413-572-1300 UnionConnect Phone App for Labor Unions http://unionconnect.com

1 1

How do you test the internal methods of a plugin?
by Steve Dondley 10 Nov '18

10 Nov '18

I'm trying to test the internal methods of a plugin in the context of a running test app. The following doesn't work but should give you an idea of what I want to accomplish: use Plack::Test; use HTTP::Request::Common; { package TestApp; use Dancer2; use Dancer2::Plugin::Menu; get '/' => sub { return template 'index' }; get '/test' => sub { template 'index.tt', { html => 'hi', }, }; build_menu; } my $test = Plack::Test->create( TestApp->to_app ); my $res; my $menu = Dancer2::Plugin::Menu->new(app => $test); # test the return value of plugin method my $result = $menu->_convert_routes_to_array; cmp_deeply($result, [ '/', '/test' ], 'returns array of menu paths'); Is there a way to do this? -- Prometheus Labor Communications, Inc. http://prometheuslabor.com 413-572-1300 UnionConnect Phone App for Labor Unions http://unionconnect.com

2 4

New module for converting markdown files to HTML
by Steve Dondley 04 Nov '18

04 Nov '18

Hello Fellow Dancers, Just wanted to announce a new module for converting markdown files to HTML. No perl code necessary to use! Just make some entries in your config.yml file and you are done. I think it'll be very useful. For example, you can now just throw your copy into a repo with markdown files and clone it to your local hard drive and you are done ever having to mess with HTML. I has two basic modes of operation right now: convert a single markdown file to all the markdown files in a single directory. It can can also automatically generate a table of contents for the file that links to the headers in the content. I've used it to generate a pretty nifty looking tutorial. You can see it in action here: http://208.199.27.88:5000/dzil_tutorial It's up on CPAN here: https://metacpan.org/pod/Dancer2::Plugin::MarkdownFilesToHTML GitHub repo is here: https://github.com/sdondley/Dancer2-Plugin-MarkdownFilesToHTML I plan on making it have tight integration with GitHub in the near future. I also plan on creating yet another local POD viewer with it as well. I'd appreciate feedback and ideas for further improvements. Thanks! -- Prometheus Labor Communications, Inc. http://prometheuslabor.com 413-572-1300 UnionConnect Phone App for Labor Unions http://unionconnect.com

1 0

2018 Dancer Advent Calendar
by Jason A. Crome 31 Oct '18

31 Oct '18

Hey Dancer Community! On behalf of the Dancer Core Team, I am trying to get a 2018 Dancer Advent Calendar organized, and we would like your help and input! How can you help? It's simple! Are there articles covering some specific area of Dancer or its ecosystem that you would like to know more about? Just reply and let us know what you would like to see. Do you want to write an article for the advent calendar? Tell us your Dancer success stories, all about a plugin you authored, how your migration from D1 to D2 went... the sky is the limit. If you have any ideas, please submit them soon to give authors a chance to work on content for the calendar. Thanks, and happy Dancing! Jason / CromeDome

10 14

Plugin DSL method 'request' is deprecated
by Zahir Lalani 30 Oct '18

30 Oct '18

Hi All We are going through our apps to remove this error by following the instructions: Use '$self->app->request' instead However, this is not possible on ajax/post calls as $self does not exist Is there an alternate solution for this? /Z

1 0