before_filter :fix_missing_session, nly => :edit

private

def fix_missing_session
if request.get? && cookies[ActionController::Base.session_options[:key]].blank?
session[:the_answer] = 42
redirect_to request.headers["REQUEST_URI"] and return
end
end

Whenever one of the edit pages with SWFupload in them is loaded without the session cookie being set, I set the session and reload the page. A better solution would probably be to encode a session string manually, or to calculate a new csrf token matching the empty session…

When I write something to the session, on the next request I can see that _csrf_token exists and the session data is longer. Then the upload will work.

‘scriptData’ : { ‘<%= get_session_key %>’ : ‘<%= u cookies[get_session_key] %>’, ‘authenticity_token’ : ‘<%= u form_authenticity_token if protect_against_forgery? %>’ },

This did the trick for me, don’t know if it’s related to your issue but worth a try.

‘scriptData’ : { ” : ”, ‘authenticity_token’ : ” },

In the log, I can see that I’m getting the authenticity token correctly in the params.
The middleware is loaded before CookieStore and with some debug code I can see that it is adding the session data to HTTP_COOKIE e.g.

“_myapp_session=BAh7BjoPc2Vzc2lvbl9pZCIlNDg1ZTExMzY5MGY0ZmQxYmU4MzMwNmFhNTcwNjc1ZmU=–71c3a1f402926876eab548d22bcfd03cd159162e”

I noticed this seems to be related to the session state, if some value has been written to the session in a request previous to the one that renders my upload interface it will work. However many pages are viewed before the upload form it won’t work unless some value has been written to the session.

Any thoughts?

def call(env)
if env['HTTP_USER_AGENT'] =~ /^(Adobe|Shockwave) Flash/
params = ::Rack::Request.new(env).params
env['HTTP_COOKIE'] = [ @session_key, params[@session_key] ].join(‘=’).freeze unless params[@session_key].nil?
env['HTTP_ACCEPT'] = ‘*/*’
end
@app.call(env)
end

def create
require ‘mp3info’
@timer = Time.now
begin
mp3_info = Mp3Info.new(params[:Filedata].path)

logger.info(“GOT MP3 INFO”)
song = Song.new
song.artist = mp3_info.tag.artist
song.title = mp3_info.tag.title
song.length_in_seconds = mp3_info.length.to_i

params[:Filedata].content_type = MIME::Types.type_for(params[:Filedata].original_filename).to_s
song.track = params[:Filedata]
logger.info(“GOT HERE”);
song.save

render :text => [song.artist, song.title, song.convert_seconds_to_time].join(” – “)
rescue Mp3InfoError => e
if @timer + 2.minutes “File error: “+e.message
else
retry
end
rescue Exception => e
render :text => e.message
end
end

it’s nasty but it does the job for now.

I’m having the same File Error message Axel mentions above, i’ve dug into it a bit and it’s an empty file error. I’ve dumped the post-params and the filedata holds : Filedata”=># when i watch that temp directory i’m seeing two files created when i try to upload. RackMultipart20100120-4108-5olzvp-0 which is 0kb and a file named mongrel20100120-4108-16qghk1-0 which is 1kb bigger than the mp3 i’m uploading, when i inspect it in a hex editor i can see the params are listed at the start. Anyone have any ideas what is happening?