SecureRoutes¶ ↑

Secure routes is routing-level support for ssl in your rails 3 application.

To install simply add this to your Gemfile:

gem 'secure_routes'

Then you need to enable secure routing in your environment config:

config.action_dispatch.secure_routes = true

If you want your action to force https protocol, add this to routes:

match 'login' => 'sessions#new', :secure => true

Or

scope :secure => true do
  match 'login' => 'sessions#new'
end

And if you’ll try to access host.com/login then you’ll be redirected to host.com/login

To force http protocol, just set :secure => false. Redirection rules works here too. If protocol is unnesesary - don’t set :secure option.

You can setup secure actions usage with:

config.action_dispatch.secure_routes = true

in your environment. It is false by default. So you can use securing for production only.

To spec it just clone repo, then:

bundle && rake spec