public
Description: SSL Requirement plugin
Homepage: http://rubyonrails.org
Clone URL: git://github.com/rails/ssl_requirement.git
name age message
file README Tue Nov 15 14:50:17 -0800 2005 [ssl_requirement plugin] add unit tests and ssl... [jamis]
directory lib/ Fri Feb 01 21:16:53 -0800 2008 SSL requirement plugin keeps flash when it redi... [jeremy]
directory test/ Fri Feb 01 21:16:53 -0800 2008 SSL requirement plugin keeps flash when it redi... [jeremy]
README
SSL Requirement
===============

SSL requirement adds a declarative way of specifying that certain actions
should only be allowed to run under SSL, and if they're accessed without it,
they should be redirected.

Example:

  class ApplicationController < ActiveRecord::Base
    include SslRequirement
  end

  class AccountController < ApplicationController
    ssl_required :signup, :payment
    ssl_allowed :index
    
    def signup
      # Non-SSL access will be redirected to SSL
    end
    
    def payment
      # Non-SSL access will be redirected to SSL
    end

    def index
      # This action will work either with or without SSL
    end

    def other
      # SSL access will be redirected to non-SSL
    end
  end
  
You can overwrite the protected method ssl_required? to rely on other things
than just the declarative specification. Say, only premium accounts get SSL.

P.S.: Beware when you include the SslRequirement module. At the time of
inclusion, it'll add the before_filter that validates the declarations. Some
times you'll want to run other before_filters before that. They should then be
declared ahead of including this module.

Copyright (c) 2005 David Heinemeier Hansson, released under the MIT license