Have Geek Brain

Problem using ssl_requirement with restful_authentication in Ruby / Rails

I am trying to use the ssl requirements plugin with the rest of the authentication module and I have a question that I am having a hard time finding an answer.

When you allow a user to log in with a non-SSL action / page, should I require SSL for the session creating the security action, or is this an overkill?

If so, how can I get the create action to work from non-SSL to SSL? It throws an exception ActionController :: MethodNotAllowed, which states: "Only messages and deletes are allowed."

Thanks.

+1


a source to share


1 answer


I am working on the same here. I think you should set up an SSL requirement to be used when creating a session, because this is where you are handling sensitive information on the server.



+1


a source






More articles:


All Articles