Partial SSL in rails

Question

Hi all,

I'm looking to do a partial SSL site in rails. I basically want to protect the user actions behind SSL, but nothing else.

Anyone know of a plugin or gem that makes this simple and efficient?

Answer 1

This is typically done with the SSL Requirement plugin. It sets up before_filters allowing you to specify which actions require SSL and which optionally allow it, and which specifically do not allow it.

Outside of that, it's just a matter of setting up 2 VHosts in your Apache (or whichever server you use) configuration, one for the SSL site and one for the non-SSL site.

Answer 2

You can try ssl_requirement. It lets you specify what you want.