module CsrfTokenCaching

# File lib/csrf_token_caching.rb, line 4
def self.included(base)

  ApplicationController.const_set "TOKEN_PLACEHOLDER", "__CROSS_SITE_REQUEST_FORGERY_PROTECTION_TOKEN__"
  base.class_eval do
    after_filter  :inject_csrf_token

    private
    def inject_csrf_token
      if protect_against_forgery? && token = form_authenticity_token
        if body_with_token = response.body.gsub!(ApplicationController::TOKEN_PLACEHOLDER, token)
          response.body = body_with_token
        end
      end
    end
  end

  ActionView::Helpers::FormTagHelper.class_eval do
    alias_method :token_tag_rails, :token_tag

    def token_tag(token=nil)
      if token != false && protect_against_forgery?
        tag(:input, :type => "hidden", :name => request_forgery_protection_token.to_s, :value => ApplicationController::TOKEN_PLACEHOLDER)
      else
        ''
      end
    end
  end

  ActionView::Helpers::CsrfHelper.class_eval do
    def csrf_meta_tags
      if protect_against_forgery?
        [
          tag('meta', :name => 'csrf-param', :content => request_forgery_protection_token),
          tag('meta', :name => 'csrf-token', :content => ApplicationController::TOKEN_PLACEHOLDER)
        ].join("\n").html_safe
      end
    end
  end

end

# File lib/csrf_token_caching.rb, line 33
def csrf_meta_tags
  if protect_against_forgery?
    [
      tag('meta', :name => 'csrf-param', :content => request_forgery_protection_token),
      tag('meta', :name => 'csrf-token', :content => ApplicationController::TOKEN_PLACEHOLDER)
    ].join("\n").html_safe
  end
end

# File lib/csrf_token_caching.rb, line 11
def inject_csrf_token
  if protect_against_forgery? && token = form_authenticity_token
    if body_with_token = response.body.gsub!(ApplicationController::TOKEN_PLACEHOLDER, token)
      response.body = body_with_token
    end
  end
end

# File lib/csrf_token_caching.rb, line 23
def token_tag(token=nil)
  if token != false && protect_against_forgery?
    tag(:input, :type => "hidden", :name => request_forgery_protection_token.to_s, :value => ApplicationController::TOKEN_PLACEHOLDER)
  else
    ''
  end
end