Class CookiesTest < ActionController::TestCase

# File actionpack/test/dispatch/cookies_test.rb, line 281
def setup
  super

  @request.env["action_dispatch.key_generator"] = ActiveSupport::KeyGenerator.new(SALT, iterations: 2)

  @request.env["action_dispatch.signed_cookie_salt"] =
    @request.env["action_dispatch.encrypted_cookie_salt"] =
    @request.env["action_dispatch.encrypted_signed_cookie_salt"] = SALT

  @request.host = "www.nextangle.com"
end

# File actionpack/test/dispatch/cookies_test.rb, line 639
def test_accessing_nonexistent_encrypted_cookie_should_not_raise_invalid_message
  get :set_encrypted_cookie
  assert_nil @controller.send(:cookies).encrypted[:non_existant_attribute]
end

# File actionpack/test/dispatch/cookies_test.rb, line 521
def test_accessing_nonexistent_signed_cookie_should_not_raise_an_invalid_signature
  get :set_signed_cookie
  assert_nil @controller.send(:cookies).signed[:non_existant_attribute]
end

# File actionpack/test/dispatch/cookies_test.rb, line 1125
def test_can_set_http_cookie_header
  @request.env['HTTP_COOKIE'] = 'user_name=david'
  get :noop
  assert_equal 'david', cookies['user_name']
  assert_equal 'david', cookies[:user_name]

  get :noop
  assert_equal 'david', cookies['user_name']
  assert_equal 'david', cookies[:user_name]

  @request.env['HTTP_COOKIE'] = 'user_name=andrew'
  get :noop
  assert_equal 'andrew', cookies['user_name']
  assert_equal 'andrew', cookies[:user_name]
end

# File actionpack/test/dispatch/cookies_test.rb, line 1141
def test_can_set_request_cookies
  @request.cookies['user_name'] = 'david'
  get :noop
  assert_equal 'david', cookies['user_name']
  assert_equal 'david', cookies[:user_name]

  get :noop
  assert_equal 'david', cookies['user_name']
  assert_equal 'david', cookies[:user_name]

  @request.cookies[:user_name] = 'andrew'
  get :noop
  assert_equal 'andrew', cookies['user_name']
  assert_equal 'andrew', cookies[:user_name]
end

# File actionpack/test/dispatch/cookies_test.rb, line 675
def test_cookie_jar_mutated_by_request_persists_on_future_requests
  get :authenticate
  cookie_jar = @request.cookie_jar
  cookie_jar.signed[:user_id] = 123
  assert_equal ["user_name", "user_id"], @request.cookie_jar.instance_variable_get(:@cookies).keys
  get :get_signed_cookie
  assert_equal ["user_name", "user_id"], @request.cookie_jar.instance_variable_get(:@cookies).keys
end

# File actionpack/test/dispatch/cookies_test.rb, line 945
def test_cookie_with_all_domain_option
  get :set_cookie_with_domain
  assert_response :success
  assert_cookie_header "user_name=rizwanreza; domain=.nextangle.com; path=/"
end

# File actionpack/test/dispatch/cookies_test.rb, line 1007
def test_cookie_with_all_domain_option_and_tld_length
  get :set_cookie_with_domain_and_tld
  assert_response :success
  assert_cookie_header "user_name=rizwanreza; domain=.nextangle.com; path=/"
end

# File actionpack/test/dispatch/cookies_test.rb, line 1020
def test_cookie_with_all_domain_option_using_a_non_standard_2_letter_tld
  @request.host = "admin.lvh.me"
  get :set_cookie_with_domain_and_tld
  assert_response :success
  assert_cookie_header "user_name=rizwanreza; domain=.lvh.me; path=/"
end

# File actionpack/test/dispatch/cookies_test.rb, line 951
def test_cookie_with_all_domain_option_using_a_non_standard_tld
  @request.host = "two.subdomains.nextangle.local"
  get :set_cookie_with_domain
  assert_response :success
  assert_cookie_header "user_name=rizwanreza; domain=.nextangle.local; path=/"
end

# File actionpack/test/dispatch/cookies_test.rb, line 1013
def test_cookie_with_all_domain_option_using_a_non_standard_tld_and_tld_length
  @request.host = "two.subdomains.nextangle.local"
  get :set_cookie_with_domain_and_tld
  assert_response :success
  assert_cookie_header "user_name=rizwanreza; domain=.nextangle.local; path=/"
end

# File actionpack/test/dispatch/cookies_test.rb, line 958
def test_cookie_with_all_domain_option_using_australian_style_tld
  @request.host = "nextangle.com.au"
  get :set_cookie_with_domain
  assert_response :success
  assert_cookie_header "user_name=rizwanreza; domain=.nextangle.com.au; path=/"
end

# File actionpack/test/dispatch/cookies_test.rb, line 972
def test_cookie_with_all_domain_option_using_host_with_port
  @request.host = "nextangle.local:3000"
  get :set_cookie_with_domain
  assert_response :success
  assert_cookie_header "user_name=rizwanreza; domain=.nextangle.local; path=/"
end

# File actionpack/test/dispatch/cookies_test.rb, line 1027
def test_cookie_with_all_domain_option_using_host_with_port_and_tld_length
  @request.host = "nextangle.local:3000"
  get :set_cookie_with_domain_and_tld
  assert_response :success
  assert_cookie_header "user_name=rizwanreza; domain=.nextangle.local; path=/"
end

# File actionpack/test/dispatch/cookies_test.rb, line 986
def test_cookie_with_all_domain_option_using_ipv4_address
  @request.host = "192.168.1.1"
  get :set_cookie_with_domain
  assert_response :success
  assert_cookie_header "user_name=rizwanreza; path=/"
end

# File actionpack/test/dispatch/cookies_test.rb, line 993
def test_cookie_with_all_domain_option_using_ipv6_address
  @request.host = "2001:0db8:85a3:0000:0000:8a2e:0370:7334"
  get :set_cookie_with_domain
  assert_response :success
  assert_cookie_header "user_name=rizwanreza; path=/"
end

# File actionpack/test/dispatch/cookies_test.rb, line 979
def test_cookie_with_all_domain_option_using_localhost
  @request.host = "localhost"
  get :set_cookie_with_domain
  assert_response :success
  assert_cookie_header "user_name=rizwanreza; path=/"
end

# File actionpack/test/dispatch/cookies_test.rb, line 965
def test_cookie_with_all_domain_option_using_uk_style_tld
  @request.host = "nextangle.co.uk"
  get :set_cookie_with_domain
  assert_response :success
  assert_cookie_header "user_name=rizwanreza; domain=.nextangle.co.uk; path=/"
end

# File actionpack/test/dispatch/cookies_test.rb, line 1041
def test_cookie_with_several_preset_domains_using_one_of_these_domains
  @request.host = "example1.com"
  get :set_cookie_with_domains
  assert_response :success
  assert_cookie_header "user_name=rizwanreza; domain=example1.com; path=/"
end

# File actionpack/test/dispatch/cookies_test.rb, line 1048
def test_cookie_with_several_preset_domains_using_other_domain
  @request.host = "other-domain.com"
  get :set_cookie_with_domains
  assert_response :success
  assert_cookie_header "user_name=rizwanreza; path=/"
end

# File actionpack/test/dispatch/cookies_test.rb, line 1055
def test_cookie_with_several_preset_domains_using_shared_domain
  @request.host = "example3.com"
  get :set_cookie_with_domains
  assert_response :success
  assert_cookie_header "user_name=rizwanreza; domain=.example3.com; path=/"
end

# File actionpack/test/dispatch/cookies_test.rb, line 1113
def test_cookies_can_be_cleared
  get :symbol_key
  assert_equal "david", cookies[:user_name]

  cookies.clear
  get :noop
  assert_nil cookies[:user_name]

  get :symbol_key
  assert_equal "david", cookies[:user_name]
end

# File actionpack/test/dispatch/cookies_test.rb, line 1078
def test_cookies_hash_is_indifferent_access
  get :symbol_key
  assert_equal "david", cookies[:user_name]
  assert_equal "david", cookies['user_name']
  get :string_key
  assert_equal "dhh", cookies[:user_name]
  assert_equal "dhh", cookies['user_name']
end

# File actionpack/test/dispatch/cookies_test.rb, line 400
def test_cookies_persist_throughout_request
  response = get :authenticate
  assert_match(/user_name=david/, response.headers["Set-Cookie"])
end

# File actionpack/test/dispatch/cookies_test.rb, line 1157
def test_cookies_precedence_over_http_cookie
  @request.env['HTTP_COOKIE'] = 'user_name=andrew'
  get :authenticate
  assert_equal 'david', cookies['user_name']
  assert_equal 'david', cookies[:user_name]

  get :noop
  assert_equal 'david', cookies['user_name']
  assert_equal 'david', cookies[:user_name]
end

# File actionpack/test/dispatch/cookies_test.rb, line 1168
def test_cookies_precedence_over_request_cookies
  @request.cookies['user_name'] = 'andrew'
  get :authenticate
  assert_equal 'david', cookies['user_name']
  assert_equal 'david', cookies[:user_name]

  get :noop
  assert_equal 'david', cookies['user_name']
  assert_equal 'david', cookies[:user_name]
end

# File actionpack/test/dispatch/cookies_test.rb, line 1099
def test_cookies_retained_across_requests
  get :symbol_key
  assert_cookie_header "user_name=david; path=/"
  assert_equal "david", cookies[:user_name]

  get :noop
  assert !@response.headers.include?("Set-Cookie")
  assert_equal "david", cookies[:user_name]

  get :noop
  assert !@response.headers.include?("Set-Cookie")
  assert_equal "david", cookies[:user_name]
end

# File actionpack/test/dispatch/cookies_test.rb, line 655
def test_delete_and_set_cookie
  request.cookies[:user_name] = 'Joe'
  get :delete_and_set_cookie
  assert_cookie_header "user_name=david; path=/; expires=Mon, 10 Oct 2005 05:00:00 -0000"
  assert_equal({"user_name" => "david"}, @response.cookies)
end

# File actionpack/test/dispatch/cookies_test.rb, line 375
def test_delete_cookie_with_path
  request.cookies[:user_name] = 'Joe'
  get :delete_cookie_with_path
  assert_cookie_header "user_name=; path=/beaten; max-age=0; expires=Thu, 01 Jan 1970 00:00:00 -0000"
end

# File actionpack/test/dispatch/cookies_test.rb, line 381
def test_delete_unexisting_cookie
  request.cookies.clear
  get :delete_cookie
  assert_predicate @response.cookies, :empty?
end

# File actionpack/test/dispatch/cookies_test.rb, line 387
def test_deleted_cookie_predicate
  cookies[:user_name] = 'Joe'
  cookies.delete("user_name")
  assert cookies.deleted?("user_name")
  assert_equal false, cookies.deleted?("another")
end

# File actionpack/test/dispatch/cookies_test.rb, line 394
def test_deleted_cookie_predicate_with_mismatching_options
  cookies[:user_name] = 'Joe'
  cookies.delete("user_name", :path => "/path")
  assert_equal false, cookies.deleted?("user_name", :path => "/different")
end

# File actionpack/test/dispatch/cookies_test.rb, line 1000
def test_deleting_cookie_with_all_domain_option
  request.cookies[:user_name] = 'Joe'
  get :delete_cookie_with_domain
  assert_response :success
  assert_cookie_header "user_name=; domain=.nextangle.com; path=/; max-age=0; expires=Thu, 01 Jan 1970 00:00:00 -0000"
end

# File actionpack/test/dispatch/cookies_test.rb, line 1034
def test_deleting_cookie_with_all_domain_option_and_tld_length
  request.cookies[:user_name] = 'Joe'
  get :delete_cookie_with_domain_and_tld
  assert_response :success
  assert_cookie_header "user_name=; domain=.nextangle.com; path=/; max-age=0; expires=Thu, 01 Jan 1970 00:00:00 -0000"
end

# File actionpack/test/dispatch/cookies_test.rb, line 1062
def test_deletings_cookie_with_several_preset_domains_using_one_of_these_domains
  @request.host = "example2.com"
  request.cookies[:user_name] = 'Joe'
  get :delete_cookie_with_domains
  assert_response :success
  assert_cookie_header "user_name=; domain=example2.com; path=/; max-age=0; expires=Thu, 01 Jan 1970 00:00:00 -0000"
end

# File actionpack/test/dispatch/cookies_test.rb, line 1070
def test_deletings_cookie_with_several_preset_domains_using_other_domain
  @request.host = "other-domain.com"
  request.cookies[:user_name] = 'Joe'
  get :delete_cookie_with_domains
  assert_response :success
  assert_cookie_header "user_name=; path=/; max-age=0; expires=Thu, 01 Jan 1970 00:00:00 -0000"
end

# File actionpack/test/dispatch/cookies_test.rb, line 576
def test_encrypted_cookie_using_custom_digest
  @request.env["action_dispatch.cookies_digest"] = 'SHA256'
  get :set_encrypted_cookie
  cookies = @controller.send :cookies
  assert_not_equal 'bar', cookies[:foo]
  assert_equal 'bar', cookies.encrypted[:foo]

  sign_secret = @request.env["action_dispatch.key_generator"].generate_key(@request.env["action_dispatch.encrypted_signed_cookie_salt"])

  sha1_verifier   = ActiveSupport::MessageVerifier.new(sign_secret, serializer: ActiveSupport::MessageEncryptor::NullSerializer, digest: 'SHA1')
  sha256_verifier = ActiveSupport::MessageVerifier.new(sign_secret, serializer: ActiveSupport::MessageEncryptor::NullSerializer, digest: 'SHA256')

  assert_raises(ActiveSupport::MessageVerifier::InvalidSignature) do
    sha1_verifier.verify(cookies[:foo])
  end

  assert_nothing_raised do
    sha256_verifier.verify(cookies[:foo])
  end
end

# File actionpack/test/dispatch/cookies_test.rb, line 569
def test_encrypted_cookie_using_custom_serializer
  @request.env["action_dispatch.cookies_serializer"] = CustomSerializer
  get :set_encrypted_cookie
  assert_not_equal 'bar', cookies.encrypted[:foo]
  assert_equal 'bar was dumped and loaded', cookies.encrypted[:foo]
end

# File actionpack/test/dispatch/cookies_test.rb, line 526
def test_encrypted_cookie_using_default_serializer
  get :set_encrypted_cookie
  cookies = @controller.send :cookies
  assert_not_equal 'bar', cookies[:foo]
  assert_raise TypeError do
    cookies.signed[:foo]
  end
  assert_equal 'bar', cookies.encrypted[:foo]
end

# File actionpack/test/dispatch/cookies_test.rb, line 597
def test_encrypted_cookie_using_hybrid_serializer_can_migrate_marshal_dumped_value_to_json
  @request.env["action_dispatch.cookies_serializer"] = :hybrid

  key_generator = @request.env["action_dispatch.key_generator"]
  encrypted_cookie_salt = @request.env["action_dispatch.encrypted_cookie_salt"]
  encrypted_signed_cookie_salt = @request.env["action_dispatch.encrypted_signed_cookie_salt"]
  secret = key_generator.generate_key(encrypted_cookie_salt)
  sign_secret = key_generator.generate_key(encrypted_signed_cookie_salt)

  marshal_value = ActiveSupport::MessageEncryptor.new(secret, sign_secret, serializer: Marshal).encrypt_and_sign("bar")
  @request.headers["Cookie"] = "foo=#{marshal_value}"

  get :get_encrypted_cookie

  cookies = @controller.send :cookies
  assert_not_equal "bar", cookies[:foo]
  assert_equal "bar", cookies.encrypted[:foo]

  encryptor = ActiveSupport::MessageEncryptor.new(secret, sign_secret, serializer: JSON)
  assert_equal "bar", encryptor.decrypt_and_verify(@response.cookies["foo"])
end

# File actionpack/test/dispatch/cookies_test.rb, line 619
def test_encrypted_cookie_using_hybrid_serializer_can_read_from_json_dumped_value
  @request.env["action_dispatch.cookies_serializer"] = :hybrid

  key_generator = @request.env["action_dispatch.key_generator"]
  encrypted_cookie_salt = @request.env["action_dispatch.encrypted_cookie_salt"]
  encrypted_signed_cookie_salt = @request.env["action_dispatch.encrypted_signed_cookie_salt"]
  secret = key_generator.generate_key(encrypted_cookie_salt)
  sign_secret = key_generator.generate_key(encrypted_signed_cookie_salt)
  json_value = ActiveSupport::MessageEncryptor.new(secret, sign_secret, serializer: JSON).encrypt_and_sign("bar")
  @request.headers["Cookie"] = "foo=#{json_value}"

  get :get_encrypted_cookie

  cookies = @controller.send :cookies
  assert_not_equal "bar", cookies[:foo]
  assert_equal "bar", cookies.encrypted[:foo]

  assert_nil @response.cookies["foo"]
end

# File actionpack/test/dispatch/cookies_test.rb, line 547
def test_encrypted_cookie_using_json_serializer
  @request.env["action_dispatch.cookies_serializer"] = :json
  get :set_encrypted_cookie
  cookies = @controller.send :cookies
  assert_not_equal 'bar', cookies[:foo]
  assert_raises ::JSON::ParserError do
    cookies.signed[:foo]
  end
  assert_equal 'bar', cookies.encrypted[:foo]
end

# File actionpack/test/dispatch/cookies_test.rb, line 536
def test_encrypted_cookie_using_marshal_serializer
  @request.env["action_dispatch.cookies_serializer"] = :marshal
  get :set_encrypted_cookie
  cookies = @controller.send :cookies
  assert_not_equal 'bar', cookies[:foo]
  assert_raises TypeError do
    cookies.signed[:foo]
  end
  assert_equal 'bar', cookies.encrypted[:foo]
end

# File actionpack/test/dispatch/cookies_test.rb, line 755
def test_encrypted_uses_encrypted_cookie_jar_if_only_secret_key_base_is_set
  @request.env["action_dispatch.secret_token"] = nil
  @request.env["action_dispatch.secret_key_base"] = "c3b95688f35581fad38df788add315ff"
  get :get_encrypted_cookie
  assert_kind_of ActionDispatch::Cookies::EncryptedCookieJar, cookies.encrypted
end

# File actionpack/test/dispatch/cookies_test.rb, line 762
def test_encrypted_uses_upgrade_legacy_encrypted_cookie_jar_if_both_secret_token_and_secret_key_base_are_set
  @request.env["action_dispatch.secret_token"] = "b3c631c314c0bbca50c1b2843150fe33"
  @request.env["action_dispatch.secret_key_base"] = "c3b95688f35581fad38df788add315ff"
  get :get_encrypted_cookie
  assert_kind_of ActionDispatch::Cookies::UpgradeLegacyEncryptedCookieJar, cookies.encrypted
end

# File actionpack/test/dispatch/cookies_test.rb, line 368
def test_expiring_cookie
  request.cookies[:user_name] = 'Joe'
  get :logout
  assert_cookie_header "user_name=; path=/; max-age=0; expires=Thu, 01 Jan 1970 00:00:00 -0000"
  assert_equal({"user_name" => nil}, @response.cookies)
end

# File actionpack/test/dispatch/cookies_test.rb, line 863
def test_legacy_json_signed_cookie_is_read_and_transparently_encrypted_by_encrypted_hybrid_cookie_jar_if_both_secret_token_and_secret_key_base_are_set
  @request.env["action_dispatch.cookies_serializer"] = :hybrid
  @request.env["action_dispatch.secret_token"] = "b3c631c314c0bbca50c1b2843150fe33"
  @request.env["action_dispatch.secret_key_base"] = "c3b95688f35581fad38df788add315ff"
  @request.env["action_dispatch.encrypted_cookie_salt"] = "4433796b79d99a7735553e316522acee"
  @request.env["action_dispatch.encrypted_signed_cookie_salt"] = "00646eb40062e1b1deff205a27cd30f9"

  legacy_value = ActiveSupport::MessageVerifier.new("b3c631c314c0bbca50c1b2843150fe33", serializer: JSON).generate('bar')

  @request.headers["Cookie"] = "foo=#{legacy_value}"
  get :get_encrypted_cookie

  assert_equal 'bar', @controller.send(:cookies).encrypted[:foo]

  key_generator = @request.env["action_dispatch.key_generator"]
  secret = key_generator.generate_key(@request.env["action_dispatch.encrypted_cookie_salt"])
  sign_secret = key_generator.generate_key(@request.env["action_dispatch.encrypted_signed_cookie_salt"])
  encryptor = ActiveSupport::MessageEncryptor.new(secret, sign_secret, serializer: JSON)
  assert_equal 'bar', encryptor.decrypt_and_verify(@response.cookies["foo"])
end

# File actionpack/test/dispatch/cookies_test.rb, line 824
def test_legacy_json_signed_cookie_is_read_and_transparently_encrypted_by_encrypted_json_cookie_jar_if_both_secret_token_and_secret_key_base_are_set
  @request.env["action_dispatch.cookies_serializer"] = :json
  @request.env["action_dispatch.secret_token"] = "b3c631c314c0bbca50c1b2843150fe33"
  @request.env["action_dispatch.secret_key_base"] = "c3b95688f35581fad38df788add315ff"
  @request.env["action_dispatch.encrypted_cookie_salt"] = "4433796b79d99a7735553e316522acee"
  @request.env["action_dispatch.encrypted_signed_cookie_salt"] = "00646eb40062e1b1deff205a27cd30f9"

  legacy_value = ActiveSupport::MessageVerifier.new("b3c631c314c0bbca50c1b2843150fe33", serializer: JSON).generate('bar')

  @request.headers["Cookie"] = "foo=#{legacy_value}"
  get :get_encrypted_cookie

  assert_equal 'bar', @controller.send(:cookies).encrypted[:foo]

  key_generator = @request.env["action_dispatch.key_generator"]
  secret = key_generator.generate_key(@request.env["action_dispatch.encrypted_cookie_salt"])
  sign_secret = key_generator.generate_key(@request.env["action_dispatch.encrypted_signed_cookie_salt"])
  encryptor = ActiveSupport::MessageEncryptor.new(secret, sign_secret, serializer: JSON)
  assert_equal 'bar', encryptor.decrypt_and_verify(@response.cookies["foo"])
end

# File actionpack/test/dispatch/cookies_test.rb, line 806
def test_legacy_json_signed_cookie_is_read_and_transparently_upgraded_by_signed_json_cookie_jar_if_both_secret_token_and_secret_key_base_are_set
  @request.env["action_dispatch.cookies_serializer"] = :json
  @request.env["action_dispatch.secret_token"] = "b3c631c314c0bbca50c1b2843150fe33"
  @request.env["action_dispatch.secret_key_base"] = "c3b95688f35581fad38df788add315ff"

  legacy_value = ActiveSupport::MessageVerifier.new("b3c631c314c0bbca50c1b2843150fe33", serializer: JSON).generate(45)

  @request.headers["Cookie"] = "user_id=#{legacy_value}"
  get :get_signed_cookie

  assert_equal 45, @controller.send(:cookies).signed[:user_id]

  key_generator = @request.env["action_dispatch.key_generator"]
  secret = key_generator.generate_key(@request.env["action_dispatch.signed_cookie_salt"])
  verifier = ActiveSupport::MessageVerifier.new(secret, serializer: JSON)
  assert_equal 45, verifier.verify(@response.cookies["user_id"])
end

# File actionpack/test/dispatch/cookies_test.rb, line 845
def test_legacy_json_signed_cookie_is_read_and_transparently_upgraded_by_signed_json_hybrid_jar_if_both_secret_token_and_secret_key_base_are_set
  @request.env["action_dispatch.cookies_serializer"] = :hybrid
  @request.env["action_dispatch.secret_token"] = "b3c631c314c0bbca50c1b2843150fe33"
  @request.env["action_dispatch.secret_key_base"] = "c3b95688f35581fad38df788add315ff"

  legacy_value = ActiveSupport::MessageVerifier.new("b3c631c314c0bbca50c1b2843150fe33", serializer: JSON).generate(45)

  @request.headers["Cookie"] = "user_id=#{legacy_value}"
  get :get_signed_cookie

  assert_equal 45, @controller.send(:cookies).signed[:user_id]

  key_generator = @request.env["action_dispatch.key_generator"]
  secret = key_generator.generate_key(@request.env["action_dispatch.signed_cookie_salt"])
  verifier = ActiveSupport::MessageVerifier.new(secret, serializer: JSON)
  assert_equal 45, verifier.verify(@response.cookies["user_id"])
end

# File actionpack/test/dispatch/cookies_test.rb, line 902
def test_legacy_marshal_signed_cookie_is_read_and_transparently_encrypted_by_encrypted_hybrid_cookie_jar_if_both_secret_token_and_secret_key_base_are_set
  @request.env["action_dispatch.cookies_serializer"] = :hybrid
  @request.env["action_dispatch.secret_token"] = "b3c631c314c0bbca50c1b2843150fe33"
  @request.env["action_dispatch.secret_key_base"] = "c3b95688f35581fad38df788add315ff"
  @request.env["action_dispatch.encrypted_cookie_salt"] = "4433796b79d99a7735553e316522acee"
  @request.env["action_dispatch.encrypted_signed_cookie_salt"] = "00646eb40062e1b1deff205a27cd30f9"

  legacy_value = ActiveSupport::MessageVerifier.new("b3c631c314c0bbca50c1b2843150fe33").generate('bar')

  @request.headers["Cookie"] = "foo=#{legacy_value}"
  get :get_encrypted_cookie

  assert_equal 'bar', @controller.send(:cookies).encrypted[:foo]

  key_generator = @request.env["action_dispatch.key_generator"]
  secret = key_generator.generate_key(@request.env["action_dispatch.encrypted_cookie_salt"])
  sign_secret = key_generator.generate_key(@request.env["action_dispatch.encrypted_signed_cookie_salt"])
  encryptor = ActiveSupport::MessageEncryptor.new(secret, sign_secret, serializer: JSON)
  assert_equal 'bar', encryptor.decrypt_and_verify(@response.cookies["foo"])
end

# File actionpack/test/dispatch/cookies_test.rb, line 884
def test_legacy_marshal_signed_cookie_is_read_and_transparently_upgraded_by_signed_json_hybrid_jar_if_both_secret_token_and_secret_key_base_are_set
  @request.env["action_dispatch.cookies_serializer"] = :hybrid
  @request.env["action_dispatch.secret_token"] = "b3c631c314c0bbca50c1b2843150fe33"
  @request.env["action_dispatch.secret_key_base"] = "c3b95688f35581fad38df788add315ff"

  legacy_value = ActiveSupport::MessageVerifier.new("b3c631c314c0bbca50c1b2843150fe33").generate(45)

  @request.headers["Cookie"] = "user_id=#{legacy_value}"
  get :get_signed_cookie

  assert_equal 45, @controller.send(:cookies).signed[:user_id]

  key_generator = @request.env["action_dispatch.key_generator"]
  secret = key_generator.generate_key(@request.env["action_dispatch.signed_cookie_salt"])
  verifier = ActiveSupport::MessageVerifier.new(secret, serializer: JSON)
  assert_equal 45, verifier.verify(@response.cookies["user_id"])
end

# File actionpack/test/dispatch/cookies_test.rb, line 786
def test_legacy_signed_cookie_is_read_and_transparently_encrypted_by_encrypted_cookie_jar_if_both_secret_token_and_secret_key_base_are_set
  @request.env["action_dispatch.secret_token"] = "b3c631c314c0bbca50c1b2843150fe33"
  @request.env["action_dispatch.secret_key_base"] = "c3b95688f35581fad38df788add315ff"
  @request.env["action_dispatch.encrypted_cookie_salt"] = "4433796b79d99a7735553e316522acee"
  @request.env["action_dispatch.encrypted_signed_cookie_salt"] = "00646eb40062e1b1deff205a27cd30f9"

  legacy_value = ActiveSupport::MessageVerifier.new("b3c631c314c0bbca50c1b2843150fe33").generate('bar')

  @request.headers["Cookie"] = "foo=#{legacy_value}"
  get :get_encrypted_cookie

  assert_equal 'bar', @controller.send(:cookies).encrypted[:foo]

  key_generator = @request.env["action_dispatch.key_generator"]
  secret = key_generator.generate_key(@request.env["action_dispatch.encrypted_cookie_salt"])
  sign_secret = key_generator.generate_key(@request.env["action_dispatch.encrypted_signed_cookie_salt"])
  encryptor = ActiveSupport::MessageEncryptor.new(secret, sign_secret)
  assert_equal 'bar', encryptor.decrypt_and_verify(@response.cookies["foo"])
end

# File actionpack/test/dispatch/cookies_test.rb, line 769
def test_legacy_signed_cookie_is_read_and_transparently_upgraded_by_signed_cookie_jar_if_both_secret_token_and_secret_key_base_are_set
  @request.env["action_dispatch.secret_token"] = "b3c631c314c0bbca50c1b2843150fe33"
  @request.env["action_dispatch.secret_key_base"] = "c3b95688f35581fad38df788add315ff"

  legacy_value = ActiveSupport::MessageVerifier.new("b3c631c314c0bbca50c1b2843150fe33").generate(45)

  @request.headers["Cookie"] = "user_id=#{legacy_value}"
  get :get_signed_cookie

  assert_equal 45, @controller.send(:cookies).signed[:user_id]

  key_generator = @request.env["action_dispatch.key_generator"]
  secret = key_generator.generate_key(@request.env["action_dispatch.signed_cookie_salt"])
  verifier = ActiveSupport::MessageVerifier.new(secret)
  assert_equal 45, verifier.verify(@response.cookies["user_id"])
end

# File actionpack/test/dispatch/cookies_test.rb, line 934
def test_legacy_signed_cookie_is_treated_as_nil_by_encrypted_cookie_jar_if_tampered
  @request.env["action_dispatch.secret_token"] = "b3c631c314c0bbca50c1b2843150fe33"
  @request.env["action_dispatch.secret_key_base"] = "c3b95688f35581fad38df788add315ff"

  @request.headers["Cookie"] = "foo=baz"
  get :get_encrypted_cookie

  assert_equal nil, @controller.send(:cookies).encrypted[:foo]
  assert_equal nil, @response.cookies["foo"]
end

# File actionpack/test/dispatch/cookies_test.rb, line 923
def test_legacy_signed_cookie_is_treated_as_nil_by_signed_cookie_jar_if_tampered
  @request.env["action_dispatch.secret_token"] = "b3c631c314c0bbca50c1b2843150fe33"
  @request.env["action_dispatch.secret_key_base"] = "c3b95688f35581fad38df788add315ff"

  @request.headers["Cookie"] = "user_id=45"
  get :get_signed_cookie

  assert_equal nil, @controller.send(:cookies).signed[:user_id]
  assert_equal nil, @response.cookies["user_id"]
end

# File actionpack/test/dispatch/cookies_test.rb, line 357
def test_multiple_cookies
  get :set_multiple_cookies
  assert_equal 2, @response.cookies.size
  assert_cookie_header "user_name=david; path=/; expires=Mon, 10 Oct 2005 05:00:00 -0000\nlogin=XJ-122; path=/"
  assert_equal({"login" => "XJ-122", "user_name" => "david"}, @response.cookies)
end

# File actionpack/test/dispatch/cookies_test.rb, line 351
def test_not_setting_cookie_with_secure
  get :authenticate_with_secure
  assert_not_cookie_header "user_name=david; path=/; secure"
  assert_not_equal({"user_name" => "david"}, @response.cookies)
end

# File actionpack/test/dispatch/cookies_test.rb, line 649
def test_permanent_signed_cookie
  get :set_permanent_signed_cookie
  assert_match(%r(#{20.years.from_now.utc.year}), @response.headers["Set-Cookie"])
  assert_equal 100, @controller.send(:cookies).signed[:remember_me]
end

# File actionpack/test/dispatch/cookies_test.rb, line 662
def test_raise_data_overflow
  assert_raise(ActionDispatch::Cookies::CookieOverflow) do
    get :raise_data_overflow
  end
end

# File actionpack/test/dispatch/cookies_test.rb, line 684
def test_raises_argument_error_if_missing_secret
  assert_raise(ArgumentError, nil.inspect) {
    @request.env["action_dispatch.key_generator"] = ActiveSupport::LegacyKeyGenerator.new(nil)
    get :set_signed_cookie
  }

  assert_raise(ArgumentError, ''.inspect) {
    @request.env["action_dispatch.key_generator"] = ActiveSupport::LegacyKeyGenerator.new("")
    get :set_signed_cookie
  }
end

# File actionpack/test/dispatch/cookies_test.rb, line 696
def test_raises_argument_error_if_secret_is_probably_insecure
  assert_raise(ArgumentError, "password".inspect) {
    @request.env["action_dispatch.key_generator"] = ActiveSupport::LegacyKeyGenerator.new("password")
    get :set_signed_cookie
  }

  assert_raise(ArgumentError, "secret".inspect) {
    @request.env["action_dispatch.key_generator"] = ActiveSupport::LegacyKeyGenerator.new("secret")
    get :set_signed_cookie
  }

  assert_raise(ArgumentError, "12345678901234567890123456789".inspect) {
    @request.env["action_dispatch.key_generator"] = ActiveSupport::LegacyKeyGenerator.new("12345678901234567890123456789")
    get :set_signed_cookie
  }
end

# File actionpack/test/dispatch/cookies_test.rb, line 411
def test_read_permanent_cookie
  get :set_permanent_cookie
  assert_equal 'Jamie', @controller.send(:cookies).permanent[:user_name]
end

# File actionpack/test/dispatch/cookies_test.rb, line 405
def test_set_permanent_cookie
  get :set_permanent_cookie
  assert_match(/Jamie/, @response.headers["Set-Cookie"])
  assert_match(%r(#{20.years.from_now.utc.year}), @response.headers["Set-Cookie"])
end

# File actionpack/test/dispatch/cookies_test.rb, line 293
def test_setting_cookie
  get :authenticate
  assert_cookie_header "user_name=david; path=/"
  assert_equal({"user_name" => "david"}, @response.cookies)
end

# File actionpack/test/dispatch/cookies_test.rb, line 317
def test_setting_cookie_for_fourteen_days
  get :authenticate_for_fourteen_days
  assert_cookie_header "user_name=david; path=/; expires=Mon, 10 Oct 2005 05:00:00 -0000"
  assert_equal({"user_name" => "david"}, @response.cookies)
end

# File actionpack/test/dispatch/cookies_test.rb, line 323
def test_setting_cookie_for_fourteen_days_with_symbols
  get :authenticate_for_fourteen_days_with_symbols
  assert_cookie_header "user_name=david; path=/; expires=Mon, 10 Oct 2005 05:00:00 -0000"
  assert_equal({"user_name" => "david"}, @response.cookies)
end

# File actionpack/test/dispatch/cookies_test.rb, line 329
def test_setting_cookie_with_http_only
  get :authenticate_with_http_only
  assert_cookie_header "user_name=david; path=/; HttpOnly"
  assert_equal({"user_name" => "david"}, @response.cookies)
end

# File actionpack/test/dispatch/cookies_test.rb, line 335
def test_setting_cookie_with_secure
  @request.env["HTTPS"] = "on"
  get :authenticate_with_secure
  assert_cookie_header "user_name=david; path=/; secure"
  assert_equal({"user_name" => "david"}, @response.cookies)
end

# File actionpack/test/dispatch/cookies_test.rb, line 342
def test_setting_cookie_with_secure_when_always_write_cookie_is_true
  old_cookie, @request.cookie_jar.always_write_cookie = @request.cookie_jar.always_write_cookie, true
  get :authenticate_with_secure
  assert_cookie_header "user_name=david; path=/; secure"
  assert_equal({"user_name" => "david"}, @response.cookies)
ensure
  @request.cookie_jar.always_write_cookie = old_cookie
end

# File actionpack/test/dispatch/cookies_test.rb, line 644
def test_setting_invalid_encrypted_cookie_should_return_nil_when_accessing_it
  get :set_invalid_encrypted_cookie
  assert_nil @controller.send(:cookies).encrypted[:invalid_cookie]
end

# File actionpack/test/dispatch/cookies_test.rb, line 1087
def test_setting_request_cookies_is_indifferent_access
  cookies.clear
  cookies[:user_name] = "andrew"
  get :string_key_mock
  assert_equal "david", cookies['user_name']

  cookies.clear
  cookies['user_name'] = "andrew"
  get :symbol_key_mock
  assert_equal "david", cookies[:user_name]
end

# File actionpack/test/dispatch/cookies_test.rb, line 364
def test_setting_test_cookie
  assert_nothing_raised { get :access_frozen_cookies }
end

# File actionpack/test/dispatch/cookies_test.rb, line 299
def test_setting_the_same_value_to_cookie
  request.cookies[:user_name] = 'david'
  get :authenticate
  assert_predicate response.cookies, :empty?
end

# File actionpack/test/dispatch/cookies_test.rb, line 305
def test_setting_the_same_value_to_permanent_cookie
  request.cookies[:user_name] = 'Jamie'
  get :set_permanent_cookie
  assert_equal({'user_name' => 'Jamie'}, response.cookies)
end

# File actionpack/test/dispatch/cookies_test.rb, line 311
def test_setting_with_escapable_characters
  get :set_with_with_escapable_characters
  assert_cookie_header "that+%26+guy=foo+%26+bar+%3D%3E+baz; path=/"
  assert_equal({"that & guy" => "foo & bar => baz"}, @response.cookies)
end

# File actionpack/test/dispatch/cookies_test.rb, line 430
def test_signed_cookie_using_custom_digest
  @request.env["action_dispatch.cookies_digest"] = 'SHA256'
  get :set_signed_cookie
  cookies = @controller.send :cookies
  assert_not_equal 45, cookies[:user_id]
  assert_equal 45, cookies.signed[:user_id]

  key_generator = @request.env["action_dispatch.key_generator"]
  signed_cookie_salt = @request.env["action_dispatch.signed_cookie_salt"]
  secret = key_generator.generate_key(signed_cookie_salt)

  verifier = ActiveSupport::MessageVerifier.new(secret, serializer: Marshal, digest: 'SHA256')
  assert_equal verifier.generate(45), cookies[:user_id]
end

# File actionpack/test/dispatch/cookies_test.rb, line 476
def test_signed_cookie_using_custom_serializer
  @request.env["action_dispatch.cookies_serializer"] = CustomSerializer
  get :set_signed_cookie
  assert_not_equal 45, cookies[:user_id]
  assert_equal '45 was dumped and loaded', cookies.signed[:user_id]
end

# File actionpack/test/dispatch/cookies_test.rb, line 416
def test_signed_cookie_using_default_digest
  get :set_signed_cookie
  cookies = @controller.send :cookies
  assert_not_equal 45, cookies[:user_id]
  assert_equal 45, cookies.signed[:user_id]

  key_generator = @request.env["action_dispatch.key_generator"]
  signed_cookie_salt = @request.env["action_dispatch.signed_cookie_salt"]
  secret = key_generator.generate_key(signed_cookie_salt)

  verifier = ActiveSupport::MessageVerifier.new(secret, serializer: Marshal, digest: 'SHA1')
  assert_equal verifier.generate(45), cookies[:user_id]
end

# File actionpack/test/dispatch/cookies_test.rb, line 445
def test_signed_cookie_using_default_serializer
  get :set_signed_cookie
  cookies = @controller.send :cookies
  assert_not_equal 45, cookies[:user_id]
  assert_equal 45, cookies.signed[:user_id]
end

# File actionpack/test/dispatch/cookies_test.rb, line 483
def test_signed_cookie_using_hybrid_serializer_can_migrate_marshal_dumped_value_to_json
  @request.env["action_dispatch.cookies_serializer"] = :hybrid

  key_generator = @request.env["action_dispatch.key_generator"]
  signed_cookie_salt = @request.env["action_dispatch.signed_cookie_salt"]
  secret = key_generator.generate_key(signed_cookie_salt)

  marshal_value = ActiveSupport::MessageVerifier.new(secret, serializer: Marshal).generate(45)
  @request.headers["Cookie"] = "user_id=#{marshal_value}"

  get :get_signed_cookie

  cookies = @controller.send :cookies
  assert_not_equal 45, cookies[:user_id]
  assert_equal 45, cookies.signed[:user_id]

  verifier = ActiveSupport::MessageVerifier.new(secret, serializer: JSON)
  assert_equal 45, verifier.verify(@response.cookies['user_id'])
end

# File actionpack/test/dispatch/cookies_test.rb, line 503
def test_signed_cookie_using_hybrid_serializer_can_read_from_json_dumped_value
  @request.env["action_dispatch.cookies_serializer"] = :hybrid

  key_generator = @request.env["action_dispatch.key_generator"]
  signed_cookie_salt = @request.env["action_dispatch.signed_cookie_salt"]
  secret = key_generator.generate_key(signed_cookie_salt)
  json_value = ActiveSupport::MessageVerifier.new(secret, serializer: JSON).generate(45)
  @request.headers["Cookie"] = "user_id=#{json_value}"

  get :get_signed_cookie

  cookies = @controller.send :cookies
  assert_not_equal 45, cookies[:user_id]
  assert_equal 45, cookies.signed[:user_id]

  assert_nil @response.cookies["user_id"]
end

# File actionpack/test/dispatch/cookies_test.rb, line 460
def test_signed_cookie_using_json_serializer
  @request.env["action_dispatch.cookies_serializer"] = :json
  get :set_signed_cookie
  cookies = @controller.send :cookies
  assert_not_equal 45, cookies[:user_id]
  assert_equal 45, cookies.signed[:user_id]
end

# File actionpack/test/dispatch/cookies_test.rb, line 452
def test_signed_cookie_using_marshal_serializer
  @request.env["action_dispatch.cookies_serializer"] = :marshal
  get :set_signed_cookie
  cookies = @controller.send :cookies
  assert_not_equal 45, cookies[:user_id]
  assert_equal 45, cookies.signed[:user_id]
end

# File actionpack/test/dispatch/cookies_test.rb, line 741
def test_signed_or_encrypted_uses_encrypted_cookie_jar_if_only_secret_key_base_is_set
  @request.env["action_dispatch.secret_token"] = nil
  @request.env["action_dispatch.secret_key_base"] = "c3b95688f35581fad38df788add315ff"
  get :get_encrypted_cookie
  assert_kind_of ActionDispatch::Cookies::EncryptedCookieJar, cookies.signed_or_encrypted
end

# File actionpack/test/dispatch/cookies_test.rb, line 734
def test_signed_or_encrypted_uses_signed_cookie_jar_if_only_secret_token_is_set
  @request.env["action_dispatch.secret_token"] = "b3c631c314c0bbca50c1b2843150fe33"
  @request.env["action_dispatch.secret_key_base"] = nil
  get :get_encrypted_cookie
  assert_kind_of ActionDispatch::Cookies::SignedCookieJar, cookies.signed_or_encrypted
end

# File actionpack/test/dispatch/cookies_test.rb, line 748
def test_signed_or_encrypted_uses_upgrade_legacy_encrypted_cookie_jar_if_both_secret_token_and_secret_key_base_are_set
  @request.env["action_dispatch.secret_token"] = "b3c631c314c0bbca50c1b2843150fe33"
  @request.env["action_dispatch.secret_key_base"] = "c3b95688f35581fad38df788add315ff"
  get :get_encrypted_cookie
  assert_kind_of ActionDispatch::Cookies::UpgradeLegacyEncryptedCookieJar, cookies.signed_or_encrypted
end

# File actionpack/test/dispatch/cookies_test.rb, line 720
def test_signed_uses_signed_cookie_jar_if_only_secret_key_base_is_set
  @request.env["action_dispatch.secret_token"] = nil
  @request.env["action_dispatch.secret_key_base"] = "c3b95688f35581fad38df788add315ff"
  get :set_signed_cookie
  assert_kind_of ActionDispatch::Cookies::SignedCookieJar, cookies.signed
end

# File actionpack/test/dispatch/cookies_test.rb, line 713
def test_signed_uses_signed_cookie_jar_if_only_secret_token_is_set
  @request.env["action_dispatch.secret_token"] = "b3c631c314c0bbca50c1b2843150fe33"
  @request.env["action_dispatch.secret_key_base"] = nil
  get :set_signed_cookie
  assert_kind_of ActionDispatch::Cookies::SignedCookieJar, cookies.signed
end

# File actionpack/test/dispatch/cookies_test.rb, line 727
def test_signed_uses_upgrade_legacy_signed_cookie_jar_if_both_secret_token_and_secret_key_base_are_set
  @request.env["action_dispatch.secret_token"] = "b3c631c314c0bbca50c1b2843150fe33"
  @request.env["action_dispatch.secret_key_base"] = "c3b95688f35581fad38df788add315ff"
  get :set_signed_cookie
  assert_kind_of ActionDispatch::Cookies::UpgradeLegacySignedCookieJar, cookies.signed
end

# File actionpack/test/dispatch/cookies_test.rb, line 668
def test_tampered_cookies
  assert_nothing_raised do
    get :tampered_cookies
    assert_response :success
  end
end

# File actionpack/test/dispatch/cookies_test.rb, line 558
def test_wrapped_encrypted_cookie_using_json_serializer
  @request.env["action_dispatch.cookies_serializer"] = :json
  get :set_wrapped_encrypted_cookie
  cookies = @controller.send :cookies
  assert_not_equal 'wrapped: bar', cookies[:foo]
  assert_raises ::JSON::ParserError do
    cookies.signed[:foo]
  end
  assert_equal 'wrapped: bar', cookies.encrypted[:foo]
end

# File actionpack/test/dispatch/cookies_test.rb, line 468
def test_wrapped_signed_cookie_using_json_serializer
  @request.env["action_dispatch.cookies_serializer"] = :json
  get :set_wrapped_signed_cookie
  cookies = @controller.send :cookies
  assert_not_equal 'wrapped: 45', cookies[:user_id]
  assert_equal 'wrapped: 45', cookies.signed[:user_id]
end