Enforcing HTTPS for authentication matters

This commit is contained in:
Christoph Haas 2017-04-22 18:23:50 +02:00
parent 9d985c3562
commit 280b95e3fd
2 changed files with 6 additions and 0 deletions

View file

@ -75,4 +75,8 @@ Rails.application.configure do
}
# config.file_watcher = ActiveSupport::EventedFileUpdateChecker
# Any action dealing with authentication should redirect to HTTPS
config.to_prepare { Devise::SessionsController.force_ssl(port: 3001) }
end

View file

@ -106,4 +106,6 @@ Rails.application.configure do
small: '160x120',
}
# Any action dealing with authentication should redirect to HTTPS
config.to_prepare { Devise::SessionsController.force_ssl }
end