On Jan 3, 2011, at 3:23 PM, Frederick Cheung wrote:
On Jan 3, 7:40 pm, "Mustafa C." <[email protected]> wrote:
Have you looked at this page?
http://stackoverflow.com/questions/1662262/rails-redirect-with-https
Walter
Hi Walter,
Thanks. I had seen it; it made sense to revisit it at this point.
However, it still doesn't cure my problem. I put in the below code:
def require_ssl
if request.ssl?
return true
else
redirect_to :protocol => "https://"
end
And athttp://mysite.com; when I attempt a login, I get following:
Processing SessionsController#create [POST]
Parameters: {"action"=>"create", "controller"=>"sessions",
"login"=>"my_user", "password"=>"[FILTERED]"}
Redirected tohttps://mysite.com/sessions
Filter chain halted as [:require_ssl] rendered_or_redirected.
Redirecting halts the filter chain - this is entirely normal
It behaves similarly with the following path as well:
redirect_to :protocol => "https://", :controller => "home", :action
=>
"index".
I am not clear how redirect_to works. Rails code says "It redirects
the
browser to the target specified in +options+". My client is
Javascript,
how does it ask the browser to redirect, so I can handle that? There
seems to be a lower level retry mechanism, which doesn't reach up to
Javascript??
The browser handles the redirect - your javascript won't be aware of
it at all.
Fred
If you're trying to run an Ajax request in https, then the surrounding
page must also be https or you will hit the same-origin trap. So you
need to ensure first that this outer page is always requested through
https, and also confirm that the inner Ajax request is also coming
through https (although that will probably take care of itself if the
outer page can only be requested through https).
Walter
--
You received this message because you are subscribed to the Google Groups "Ruby on
Rails: Talk" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en.