SSL requirement adds a declarative way of specifying that certain actions
should only be allowed to run under SSL, and if they’re accessed without it,
they should be redirected.

Example:

class ApplicationController < ActiveRecord::Base
include SslRequirement
end

class AccountController < ApplicationController
ssl_required :signup, :payment
ssl_allowed :index

def signup
# Non-SSL access will be redirected to SSL
end

def payment
# Non-SSL access will be redirected to SSL
end

def index
# This action will work either with or without SSL
end

def other
# SSL access will be redirected to non-SSL
end
end

You can overwrite the protected method ssl_required? to rely on other things
than just the declarative specification. Say, only premium accounts get SSL.

Beware when you include the SslRequirement module. At the time of inclusion, it'll add the before_filter that validates the declarations. Sometimes you'll want to run other before_filters before that. They should then be declared ahead of including this module.

Repository: http://dev.rubyonrails.org/svn/rails/plugins/ssl_requirement/

Related Posts

• CleverValidation: Plugin for ruby on rails validation (0)
• Integrate Google Analytics Plugin in your application (0)
• Ruby on rails plugin: Import With Load Data In File (1)
• Exception Notifier : ror plugin for notification error (1)
• server_config: Ruby on rails plugin for sensitive configuration (0)

Tags: ror plugin, ssl plugin in ruby on rails, ssl requirement, ssl_required

This entry was posted on Friday, October 17th, 2008 at 8:03 am and is filed under ruby on rails. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.