强制Ruby on Rails应用加载HTTPS版本

Question

I have an HTTP and HTTPS version of my Ruby on Rails running, and if someone accesses through the HTTP one, I want to automatically reload the HTTPS version.

I have done this before on Apache with .httaccess. How can I do it on Rails?

Thanks

Answer 1

在您的production.rb文件中（或您要强制ssl的任何环境中）添加

config.force_ssl = true

Answer 2

You can achieve it by putting the below code in config/applcation.rb

#config/application.rb
config.force_ssl = true

Check this blog and this SO post for more info.

Answer 3

You can also achieve that by:

class ApplicationController < ActionController::Base
  force_ssl if: :ssl_enabled?

  private

  def ssl_enabled?
    %w(staging production).include?(Rails.env)
  end
end