rails / ssl_requirement Goto Github PK

NOTICE: official repository moved to https://github.com/retr0h/ssl_requirement

Ruby 100.00%

ssl_requirement's Introduction

SSL Requirement
===============

SSL requirement adds a declarative way of specifying that certain actions
should only be allowed to run under SSL, and if they're accessed without it,
they should be redirected.

Example:

  class ApplicationController < ActiveRecord::Base
    include SslRequirement
  end

  class AccountController < ApplicationController
    ssl_required :signup, :payment
    ssl_allowed :index
    
    def signup
      # Non-SSL access will be redirected to SSL
    end
    
    def payment
      # Non-SSL access will be redirected to SSL
    end

    def index
      # This action will work either with or without SSL
    end

    def other
      # SSL access will be redirected to non-SSL
    end
  end
  
You can overwrite the protected method ssl_required? to rely on other things
than just the declarative specification. Say, only premium accounts get SSL.

P.S.: Beware when you include the SslRequirement module. At the time of
inclusion, it'll add the before_filter that validates the declarations. Some
times you'll want to run other before_filters before that. They should then be
declared ahead of including this module.

Copyright (c) 2005 David Heinemeier Hansson, released under the MIT license

ssl_requirement's People

Contributors

Stargazers

Watchers

Forkers

iwarshak bladenkerst jcnetdev genki wakiki adamwiggins dougjohnston kakutani komagata natedaiger tooky sxross pliam johndouthat thincloud tekwiz rsu bclubb jwhitmire devcyqlr lightcap jzajpt grosser cu5tom scottwb mharris717 crudson willnet dewski pkmiec mkristian epictetus sshillo ssoroka cybercent ckdake thiyagarajan jinzhu chandresh economysizegeek guniorobot coreyward qlabs hchoroomi wangwang abennu mitchellhenke pr-mike vajapravin raghunadhd rajasree railsboxtech manishgkasera razeekhan joshvar88 dfhcc elorita isabella232 nali-ocb iq-scm

ssl_requirement's Issues

App-wide SSL config

Hey guys,

I was wondering if there is an easy way to force SSL on the entire app, without having to explicitly declare it in every controller?

Thanks so much!
Fer Martin

undefined method `disable_ssl_check=' for SslRequirement:Module (NoMethodError)

I am trying to replace bartt-ssl_requirement gem with ssl_requirement gem in my rails 4 app at that time I am facing this issue NoMethodError.
undefined method `disable_ssl_check=' for SslRequirement:Module (NoMethodError)

undefined method `read_inheritable_attribute'

def ssl_allowed?
(self.class.read_inheritable_attribute(:ssl_allowed_actions) || []).include?(action_name.to_sym)
end

read_inheritable_attribute and write_inheritable_array has been deprecated in rails 4

ApplicationController < ActiveRecord::Base ?

In the readme, shouldn't this be:

class ApplicationController < ActionController::Base

Latest version

It may be helpful to others to update the notice to indicate that the latest version is available here: https://github.com/bartt/ssl_requirement

https://github.com/retr0h/ssl_requirement does not seem to exist anymore.

License

I was wondering where I can find the license for this package.

Workaround for subfolder controllers

ssl_requirement's ssl_required doesn't work for "subfolder controllers", eg class Text::WriteController < ApplicationController ... located at /app/controllers/text.

Instead of using (sample for def index and def create):

ssl_required :index, :create

you can use this as a workaround:

def ssl_required?
return true if %w{index create}.any? {|a| a == params[:action]}
end

Rails 4: NoMethodError (undefined method `read_inheritable_attribute` ...

Getting this error when I am using 'ssl_requirement' with my Rails 4.0 and Ruby 2.0 application.

NoMethodError (undefined method read_inheritable_attribute' for SessionsController:Class): ssl_requirement (0.1.0) lib/ssl_requirement.rb:45:inssl_allowed?'
ssl_requirement (0.1.0) lib/ssl_requirement.rb:50:in ensure_proper_protocol' activesupport (4.0.0) lib/active_support/callbacks.rb:407:in_run__3063776826992777902__process_action__callbacks'
activesupport (4.0.0) lib/active_support/callbacks.rb:80:in run_callbacks' actionpack (4.0.0) lib/abstract_controller/callbacks.rb:17:inprocess_action'
actionpack (4.0.0) lib/action_controller/metal/rescue.rb:29:in process_action' actionpack (4.0.0) lib/action_controller/metal/instrumentation.rb:31:inblock in process_action'

rails 3 - fullpath

maybe create a rails 3 branch that uses request.fullpath rather than request.request_uri?

rails / ssl_requirement Goto Github PK

ssl_requirement's Introduction

ssl_requirement's People

Contributors

Stargazers

Watchers

Forkers

ssl_requirement's Issues

App-wide SSL config

undefined method `disable_ssl_check=' for SslRequirement:Module (NoMethodError)

ApplicationController < ActiveRecord::Base ?

Latest version

License

Workaround for subfolder controllers

Rails 4: NoMethodError (undefined method `read_inheritable_attribute` ...

rails 3 - fullpath

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent