Partial SSL in rails

问题:

I'm looking to do a partial SSL site in rails. I basically want to protect the user actions behind SSL, but nothing else.

Anyone know of a plugin or gem that makes this simple and efficient?

回答1:

This is typically done with the SSL Requirement plugin. It sets up before_filters allowing you to specify which actions require SSL and which optionally allow it, and which specifically do not allow it.

Outside of that, it's just a matter of setting up 2 VHosts in your Apache (or whichever server you use) configuration, one for the SSL site and one for the non-SSL site.

回答2:

You can try ssl_requirement. It lets you specify what you want.

回答3:

ssl_routes gem defines ssl enforcement rule in the route file. It also will automatically output the url with the correct protocol to prevent redirects.