Rails 6 安全 cookie 問題

Question

我在 ubuntu 上安裝了 spree ecommerce。一切都很好，直到我用 ngnix 設置了 https。 現在我無法在生產中登錄該應用程序。

應用程序運行正常，然后只有登錄和注冊有問題。

如果我設置config.force_ssl = true我會遇到很多重定向錯誤。

任何想法請。 謝謝你。

server {
  server_name test.shenanay.com;

  root /home/ubuntu/she/public;

  try_files $uri/index.html $uri.html @app;

  location @app {
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Host $http_host;
    proxy_redirect off;
    proxy_pass http://test.shenanay.com:3000;
    proxy_set_header origin 'https://test.shenanay.com';
    proxy_cookie_path / "/; HTTPOnly; Secure";
  }

  # some other configuration

    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/test.shenanay.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/test.shenanay.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

server {
    if ($host = test.shenanay.com) {
        return 301 https://$host$request_uri;
   } # managed by Certbot


  listen 80;
  server_name test.shenanay.com;
    return 404; # managed by Certbot

Answer 1

這解決了問題。

https://github.com/rails/rails/issues/22965

謝謝。