public
Description: SSL Requirement for Merb
Homepage:
Clone URL: git://github.com/tooky/merb-ssl-requirement.git
name age message
file .gitignore Thu Oct 23 01:18:44 -0700 2008 updating ignore [tooky]
file LICENSE Mon Oct 20 14:04:54 -0700 2008 generated as merb plugin [tooky]
file README Thu Oct 23 01:14:56 -0700 2008 updated readme to reflect merb [tooky]
file Rakefile Mon Oct 27 09:47:28 -0700 2008 updating gemspec [tooky]
file TODO Thu Oct 23 01:07:27 -0700 2008 release! [tooky]
directory lib/ Thu Oct 23 01:22:36 -0700 2008 deleting crud from repo [tooky]
file merb-ssl-requirement.gemspec Mon Oct 27 09:47:28 -0700 2008 updating gemspec [tooky]
directory spec/ Thu Oct 23 01:18:19 -0700 2008 deleting crud from repo [tooky]
directory test/ Mon Oct 20 14:04:54 -0700 2008 generated as merb plugin [tooky]
README
SSL Requirement
===============

SSL requirement adds a declarative way of specifying that certain actions
should only be allowed to run under SSL, and if they're accessed without it,
they should be redirected.

Example:

  class Application < Merb::Controller
    include SslRequirement
  end

  class Accounts < ApplicationController
    ssl_required :signup, :payment
    ssl_allowed :index
    
    def signup
      # Non-SSL access will be redirected to SSL
    end
    
    def payment
      # Non-SSL access will be redirected to SSL
    end

    def index
      # This action will work either with or without SSL
    end

    def other
      # SSL access will be redirected to non-SSL
    end
  end
  
You can overwrite the protected method ssl_required? to rely on other things
than just the declarative specification. Say, only premium accounts get SSL.

P.S.: Beware when you include the SslRequirement module. At the time of
inclusion, it'll add the before filter that validates the declarations. Some
times you'll want to run other before filters before that. They should then be
declared ahead of including this module.

Copyright (c) 2005 David Heinemeier Hansson, released under the MIT license
Copyright (c) 2008 Steve Tooke