Enables creating batch requests to Rack apps. Requests can reference each other. Makes life easier for API consumers and builders.

A Rack Middleware component to authenticate against a CAS server. I (shamefully) forgot to attribute this to https://github.com/garnieretienne/rubycas-client-sinatra. I had reached out to garnieretienne and he was no longer interested in his project. There is also rack-cas-client gem but that was too rails focused for me.

A Rack middleware for form-based authentication. It works roughly like Basic HTTP Authentication except that the authentication page can be styled with the middleware options.

Rack middleware to automatically include Chartbeat embed codes in your site.

Cleanse your racks

combines assets to server 1 file

Rack::Compress enables Zstd and Brotli compression on HTTP responses

Conditional wrapper for Rack middleware. This is a port of Plack::Middleware::Conditional.

Somewhat more radical filters designed to decimate malicious requests during a denial-of-service (DoS) attack by chopping their connection well before your Rack app wastes any significant resources on them – ouch! The filters have been proven to work against certain DoS attacks, however, they might also block IPs behind proxies or VPNs. Make sure you have understood how the filters are triggered and consider this middleware a last resort only to be enabled during an attack.

A rack middleware that ensures Sprockets assets are served regardless of whether the asset digest matches

This Rack middleware allows you to run specific apps when the request domain matches a given filter. The filter can be provided in a number of ways, for example as a regex or as a string.

Rack middleware for signed encrypted session cookie. It's fully compatible with Rack::Session::Cookie, not only safe but also easy to use

Rack middleware for ensuring only proper hosts get passed to your application

Rails aware Rack middleware for Entra ID authentication.

Rack middleware to log request errors and respond with standard message

Rack middleware to check esa webhooks are authentic

Tells Google not to impose Federated Learning of Cohorts (FLoC) on users

Wraps Rack::Static by adding useful headers to serve web fonts.

If the user visits via a Google Analytics Campaign link, this middleware will track utm_source, utm_content, utm_term, utm_medium, utm_campaign, and time.

A rack middleware for measuring GC activity during a request.