| CARVIEW |
Select Language
HTTP/2 302
server: nginx
date: Wed, 23 Jul 2025 20:13:30 GMT
content-type: text/plain; charset=utf-8
content-length: 0
x-archive-redirect-reason: found capture at 20091215135918
location: https://web.archive.org/web/20091215135918/https://github.com/github/ssl_requirement
server-timing: captures_list;dur=0.935778, exclusion.robots;dur=0.043374, exclusion.robots.policy;dur=0.025760, esindex;dur=0.015197, cdx.remote;dur=146.403389, LoadShardBlock;dur=864.921089, PetaboxLoader3.datanode;dur=601.892168, PetaboxLoader3.resolve;dur=193.586385
x-app-server: wwwb-app28
x-ts: 302
x-tr: 1072
server-timing: TR;dur=0,Tw;dur=0,Tc;dur=5
set-cookie: SERVER=wwwb-app28; path=/
x-location: All
x-rl: 0
x-na: 0
x-page-cache: MISS
server-timing: MISS
x-nid: DigitalOcean
referrer-policy: no-referrer-when-downgrade
permissions-policy: interest-cohort=()
HTTP/2 200
server: nginx
date: Wed, 23 Jul 2025 20:13:32 GMT
content-type: text/html; charset=utf-8
x-archive-orig-server: nginx/0.7.61
x-archive-orig-date: Tue, 15 Dec 2009 13:59:17 GMT
x-archive-orig-connection: close
x-archive-orig-status: 200 OK
x-archive-orig-etag: "79b3816edaeb44ab216c5b7ba6c6244d"
x-archive-orig-x-runtime: 67ms
x-archive-orig-content-length: 22105
x-archive-orig-cache-control: private, max-age=0, must-revalidate
x-archive-guessed-content-type: text/html
x-archive-guessed-charset: utf-8
memento-datetime: Tue, 15 Dec 2009 13:59:18 GMT
link: ; rel="original", ; rel="timemap"; type="application/link-format", ; rel="timegate", ; rel="first memento"; datetime="Sat, 14 Nov 2009 12:16:47 GMT", ; rel="prev memento"; datetime="Sun, 15 Nov 2009 17:09:07 GMT", ; rel="memento"; datetime="Tue, 15 Dec 2009 13:59:18 GMT", ; rel="next memento"; datetime="Sat, 16 Jan 2010 08:45:19 GMT", ; rel="last memento"; datetime="Sat, 16 Jan 2010 08:45:19 GMT"
content-security-policy: default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: archive.org web.archive.org web-static.archive.org wayback-api.archive.org athena.archive.org analytics.archive.org pragma.archivelab.org wwwb-events.archive.org
x-archive-src: 51_13_20091215090215_crawl101_IndexOnly-c/51_13_20091215135835_crawl101.arc.gz
server-timing: captures_list;dur=0.919409, exclusion.robots;dur=0.040188, exclusion.robots.policy;dur=0.023784, esindex;dur=0.015261, cdx.remote;dur=386.864608, LoadShardBlock;dur=1282.592930, PetaboxLoader3.datanode;dur=278.641256, PetaboxLoader3.resolve;dur=706.853814, load_resource;dur=188.081050
x-app-server: wwwb-app28
x-ts: 200
x-tr: 1984
server-timing: TR;dur=0,Tw;dur=0,Tc;dur=0
x-location: All
x-rl: 0
x-na: 0
x-page-cache: MISS
server-timing: MISS
x-nid: DigitalOcean
referrer-policy: no-referrer-when-downgrade
permissions-policy: interest-cohort=()
content-encoding: gzip
github's ssl_requirement at master - GitHub
This repository is private.
All pages are served over SSL and all pushing and pulling is done over SSH.
No one may fork, clone, or view it unless they are added as a member.
Every repository with this icon () is private.
Every repository with this icon (
) is private.
This repository is public.
Anyone may fork, clone, or view it.
Every repository with this icon () is public.
Every repository with this icon (
) is public.
| Fork of pyrat/ssl_requirement | |
| Description: | github version of ssl_requirement edit |
| Homepage: | https://dev.rubyonrails.org/browser/plugins/ssl_requirement/ edit |
| Public Clone URL: |
git://github.com/github/ssl_requirement.git
Give this clone URL to anyone.
git clone git://github.com/github/ssl_requirement.git
|
| Your Clone URL: |
Use this clone URL yourself.
git clone git@github.com:github/ssl_requirement.git
|
| name | age | message | |
|---|---|---|---|
 |
README | Thu Apr 17 02:38:50 -0700 2008 | Updated readme [pyrat] |
 |
lib/ | Thu Apr 17 02:35:43 -0700 2008 | Init commit of improved plugin [pyrat] |
| |
test/ | Thu Apr 17 02:35:43 -0700 2008 | Init commit of improved plugin [pyrat] |
README
SSL Requirement
===============
SSL requirement adds a declarative way of specifying that certain actions
should only be allowed to run under SSL, and if they're accessed without it,
they should be redirected.
If the rails_env is test or development the redirection is not performed.
Example:
class ApplicationController < ActiveRecord::Base
include SslRequirement
end
class AccountController < ApplicationController
ssl_required :signup, :payment
ssl_allowed :index
def signup
# Non-SSL access will be redirected to SSL
end
def payment
# Non-SSL access will be redirected to SSL
end
def index
# This action will work either with or without SSL
end
def other
# SSL access will be redirected to non-SSL
end
end
You can overwrite the protected method ssl_required? to rely on other things
than just the declarative specification. Say, only premium accounts get SSL.
P.S.: Beware when you include the SslRequirement module. At the time of
inclusion, it'll add the before_filter that validates the declarations. Some
times you'll want to run other before_filters before that. They should then be
declared ahead of including this module.
Copyright (c) 2005 David Heinemeier Hansson, released under the MIT license
This feature is coming soon. Sit tight!