Enforcing HTTPS for authentication matters
This commit is contained in:
parent
9d985c3562
commit
280b95e3fd
2 changed files with 6 additions and 0 deletions
|
|
@ -75,4 +75,8 @@ Rails.application.configure do
|
|||
}
|
||||
|
||||
# config.file_watcher = ActiveSupport::EventedFileUpdateChecker
|
||||
|
||||
# Any action dealing with authentication should redirect to HTTPS
|
||||
config.to_prepare { Devise::SessionsController.force_ssl(port: 3001) }
|
||||
|
||||
end
|
||||
|
|
|
|||
|
|
@ -106,4 +106,6 @@ Rails.application.configure do
|
|||
small: '160x120',
|
||||
}
|
||||
|
||||
# Any action dealing with authentication should redirect to HTTPS
|
||||
config.to_prepare { Devise::SessionsController.force_ssl }
|
||||
end
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue