Force https in a Rails 4 route

Question

What's the proper way to enforce https in a rails 4 route?

For example I would expect to be able to do something like:

get 'success' => 'ssl#success', :ssl_only => true

But that doesn't do anything.

score 4 · Accepted Answer · edited May 23 '17 at 12:22

4

You can use force_ssl to force http://site/success to redirect to https://site/success. Please refer to the documentation for force_ssl.

class SSLController < ApplicationController
  force_ssl only: :success # see docs for more options
end

edited May 23 '17 at 12:22

Community

answered Sep 23 '13 at 05:53

James Lim

Yes, I knew about that one, it seems like there should be a rails 4 trick to forcing it in the route. – pguardiario Sep 23 '13 at 06:01
I don't quite understand. What are you trying to accomplish? – James Lim Sep 23 '13 at 06:09

Rajarshi Das · Answer 2 · 2013-09-23T05:51:54.857

1

If you want https://.../ssl/success

 scope constraints: { protocol: 'https' } do
  get 'success', to: 'ssl#success', as: 'success' 
 end

or

get 'success', to: 'ssl#success', as: 'success', constraints: { protocol: 'https' }

edited Sep 23 '13 at 05:51

answered Sep 23 '13 at 05:16

Rajarshi Das

No I want https://mysite.com/success to go to ssl#success. This answer isn't working for me. – pguardiario Sep 23 '13 at 05:37
sorry I am not getting is ssl your controller? and success is your action? – Rajarshi Das Sep 23 '13 at 05:39

score 0 · Answer 3 · answered Sep 23 '13 at 06:49

0

I eventually got this to work with:

get 'success', to: 'ssl#success', constraints: {protocol: /https/}

answered Sep 23 '13 at 06:49

pguardiario

hope it is same as my post ...excpt 'https' to /https/ – Rajarshi Das Sep 23 '13 at 07:46
I know, it's a small thing. My hunch is that the protocol is actually 'https://' or something and this is why the regex works but not the string. – pguardiario Sep 24 '13 at 01:14
Doesn't work for you maybe, but his answer is the correct one and it lead you to your answer. I think that would have been fair. – Ely Feb 16 '15 at 05:43

score 0 · Answer 4 · answered Jul 03 '17 at 18:24

0

In my case it worked by adding "force_ssl" in the application_controller.rb.

answered Jul 03 '17 at 18:24

Naiguel Developer

4 Answers4