chaas/debshots
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Wiki Activity Actions

Enforcing HTTPS for authentication matters

Browse source
This commit is contained in:
Christoph Haas 2017-04-22 18:23:50 +02:00
parent 9d985c3562
commit 280b95e3fd
2 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
config/environments/development.rb
View file

@ -75,4 +75,8 @@ Rails.application.configure do
} }
# config.file_watcher = ActiveSupport::EventedFileUpdateChecker # config.file_watcher = ActiveSupport::EventedFileUpdateChecker
# Any action dealing with authentication should redirect to HTTPS
config.to_prepare { Devise::SessionsController.force_ssl(port: 3001) }
end end

2
config/environments/production.rb
View file

@ -106,4 +106,6 @@ Rails.application.configure do
small: '160x120', small: '160x120',
} }
# Any action dealing with authentication should redirect to HTTPS
config.to_prepare { Devise::SessionsController.force_ssl }
end end