Agrafix Spock Versions Save

• improved get and post parameter handling, specifically they can be fetched independently now
• deprecate subcomponent
• switch from path-pieces to http-api-data
• defer parsing the request body as long as possible
• add RouteM as abstract wiring monad

For more information see https://www.spock.li/2016/08/25/shareable-apis.html

• Critical bugfix in Cookie-Parsing

• Introduce sessionRegenerateId to prevent session fixation attacks
• Fix bug in SafeActions which could lead to invalid urls
• Possibility to start Spock without port startup banner
• Allow lower level handling of HTTP-Auth data using withBasicAuthData

Community contributions

• Improved cookie handling, thanks @nmk
• Default responses are clean empty responses, thanks @UlfS
• Return 400 when unable to parse json body, thanks @paldepind

• Possible Bugfix for #44

• Introduced contexts. Each request now has a context which can change during request processing. This is very useful to DRY different tasks like authentication and make them more typesafe. The old API remains unchanged by this. For usage examples see the funblog project and read the blog post
  • Added ActionCtxT and SpockActionCtx
  • Added SpockCtxT and SpockCtxM
  • Added getContext and runInContext
  • Added prehook
• Safe SessionId generation
• Added SessionHooks
• Added reqMethod to get the current request method
• Added PCNoDatabase

• mapAllSessions function
• add README.md to cabal package

• Fix bug for HTTP Headers that can occur multiple times ( #42 )
• Simplify spock configuration using a general SpockCfg type with a reasonable defaultSpockCfg
• Request-Body size limiting (Default for spockT: disabled, default for defaultSpockCfg: 5MB)
• Homepage switched to SSL ( #33 )

• Add rawHeader functionality

• Switch to new reroute and hvect library