On Jan 3, 2011, at 3:23 PM, Frederick Cheung wrote:



On Jan 3, 7:40 pm, "Mustafa C." <[email protected]> wrote:
Have you looked at this page?
http://stackoverflow.com/questions/1662262/rails-redirect-with-https

Walter

Hi Walter,
Thanks. I had seen it; it made sense to revisit it at this point.
However, it still doesn't cure my problem. I put in the below code:
  def require_ssl
    if request.ssl?
      return true
    else
      redirect_to :protocol => "https://";
    end

And athttp://mysite.com; when I attempt a login, I get following:
Processing SessionsController#create  [POST]
  Parameters: {"action"=>"create", "controller"=>"sessions",
"login"=>"my_user", "password"=>"[FILTERED]"}
Redirected tohttps://mysite.com/sessions
Filter chain halted as [:require_ssl] rendered_or_redirected.


Redirecting halts the filter chain - this is entirely normal

It behaves similarly with the following path as well:
redirect_to :protocol => "https://";, :controller => "home", :action =>
"index".

I am not clear how redirect_to works. Rails code says "It redirects the browser to the target specified in +options+". My client is Javascript,
how does it ask the browser to redirect, so I can handle that? There
seems to be a lower level retry mechanism, which doesn't reach up to
Javascript??

The browser handles the redirect - your javascript won't be aware of
it at all.

Fred

If you're trying to run an Ajax request in https, then the surrounding page must also be https or you will hit the same-origin trap. So you need to ensure first that this outer page is always requested through https, and also confirm that the inner Ajax request is also coming through https (although that will probably take care of itself if the outer page can only be requested through https).

Walter

--
You received this message because you are subscribed to the Google Groups "Ruby on 
Rails: Talk" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-talk?hl=en.

Reply via email to