对rails中的特定控制器跳过/禁用force_ssl

Question

I need to force SSL on all routes in my application except for message#new controller.

In config/environments/production.rb , I have:

config.force_ssl = true

Now all routes being redirect to https, And now I want to disable that for message#new controller.

Does anyone know how to disable force SSL for particular controller in a Rails 4+ application?

Answer 1

according to documentation following should work ( but only for rails > 5 version ):

config.ssl_options = {
  redirect: {
    exclude: -> request { request.path =~ /healthcheck/ }
  }
}

Answer 2

skip_before_action :verify_authenticity_token
force_ssl except: [:index,:create]

Its worked for me.

Answer 3

在MessagesController.rb执行此操作 -

  force_ssl except: [:new]