I need to force SSL on all routes in my application except for landing#index.
In config/application.rb, I have:
config.force_ssl = true
Then in landing_controller.rb, I have:
force_ssl :except => :index
However, all routes are still being redirected to https.
Does anyone know how to conditionally force SSL in a Rails 3.1+ application?
Solution:
Add the following to your Gemfile:
gem 'rack-ssl-enforcer'
Add the following to your config/application.rb:
config.middleware.use Rack::SslEnforcer, :except => [ /\/$/ ], :strict => true
I asked a similar question on stackoverflow here and was told to use https://github.com/tobmatth/rack-ssl-enforcer. I haven’t tried it out yet, but based on the readme, it appears to solve your problem of conditionally enforcing ssl on certain routes.