CODEWITHSUNDEEP
ruby-on-rails
Bob
Bob

Reputation: 8504

Enable SSL for certain resource actions

My setup: Rails 3.0.9, Ruby 1.9.2

I wish to enable SSL only for the create action for projects, how do I do that? Currently I have 

  resources :projects, :constraints => { :protocol => 'https' }, :only => :create
  resources :projects, :except => :create

I don't think that's quite right though.

UPDATED

I have since changed it to 

  match 'projects' => 'projects#create', :constraints => { :protocol => 'https' }, :via => :post
  resources :projects, :except => :create

I think this is better but is there yet a better way of doing it?

Upvotes: 0

Views: 369

Answers (1)

icecream
icecream

Reputation: 1425

Although you could create a custom constraint class to move the SSL logic out of the resource declarations, I recommend this gem. It will keep your routes file clean and force SSL only in production. (That logic could be baked into the custom constraint as well, but you would also have to manage the form links too.) You would do

class ProjectsController
  include ::SslRequirement
  ssl_required :create
end

<%= form_for(@project, projects_url(:secure => true)) do |f| %>
<% end %>

Upvotes: 1

Related Questions