manveru / innate Goto Github PK

The `Innate::Helper::Redirect::raw_redirect` method discards the current response and creates a new one before performing a redirect. This means that any cookies set or deleted as a result of the current request will not be included in the response, which makes it impossible to change cookies during a request that results in a redirect.

In pre-Innate Ramaze, it was possible to change cookies before redirecting. Modifying cookies and then redirecting is also a very common pattern for login/logout actions, so I see this as a bug.

YAML serialization for sessions (Ramaze.options.cache.session = Ramaze::Cache::YAML) doesn't work here because the session expiration date is too far in the future (e.g. {:expires=>Tue Jan 19 04:14:06 +0100 2038}) and YAML can't serialize it, which causes an "time out of range" ArgumentError.