# How to use SslRequirement plugin?

**URL:** <https://www.ruby-forum.com/t/how-to-use-sslrequirement-plugin/87877>\
**Category:** Rails\
**Created:** [March 6, 2007, 4:51pm UTC](https://www.ruby-forum.com/t/how-to-use-sslrequirement-plugin/87877 "2007-03-06T16:51:33Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Joram](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/e8c25b/32.png) [@Joram](https://www.ruby-forum.com/u/Joram)\
**Post date:** [March 6, 2007, 4:51pm UTC](https://www.ruby-forum.com/t/how-to-use-sslrequirement-plugin/87877/1 "2007-03-06T16:51:33Z")

</div>

Hi all,

I need to use the SslRequirement plugin for a login page.  
The plugin is installed, the code is normally correct (comes straight  
from AWWRoR)

class LoginController \< ApplicationController  
include SslRequirement

ssl\_required :login

(yes, the login method is defined)

When trying to access the login page I get this in the log:

Processing LoginController#login (for 127.0.0.1 at 2007-03-06  
16:44:56) [GET]  
Session ID: ee439de1c66b2ec06185ac4e760c0be6  
Parameters: {“action”=\>“login”, “controller”=\>“login”}  
Redirected to [https://localhost/nephrology](https://localhost/nephrology)  
Filter chain halted as  
[#\<ActionController::Filters::ClassMethods::SymbolFilter:0x32678a4  
@filter=:ensure\_proper\_protocol\>] returned false.  
Completed in 0.00010 (10000 reqs/sec) | DB: 0.00000 (0%) | 302 Found  
[[http://localhost/nephrology](http://localhost/nephrology)]

Anyway can help me out?

---

<div class="post-metadata">

**Author:** ![Joram](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/e8c25b/32.png) [@Joram](https://www.ruby-forum.com/u/Joram)\
**Post date:** [March 6, 2007, 6:15pm UTC](https://www.ruby-forum.com/t/how-to-use-sslrequirement-plugin/87877/2 "2007-03-06T18:15:59Z")

</div>

On 3/6/07, Joram [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> [#\<ActionController::Filters::ClassMethods::SymbolFilter:0x32678a4  
> @filter=:ensure\_proper\_protocol\>] returned false.  
> Completed in 0.00010 (10000 reqs/sec) | DB: 0.00000 (0%) | 302 Found  
> [[http://localhost/nephrology](http://localhost/nephrology)]
> 
> Anyway can help me out?

That part is an expected response… it saw that you didn’t request  
with  
the right protocol, and redirected you to the proper page (thus the 302  
status code… that means redirect). Is your browser not going there?  
What  
is the specific problem?

–  
-Eric Price

“The greatest error in the history of searching for meaning is assuming  
that  
it is found outside one’s self.”

---

<div class="post-metadata">

**Author:** ![Joram](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/e8c25b/32.png) [@Joram](https://www.ruby-forum.com/u/Joram)\
**Post date:** [March 6, 2007, 8:51pm UTC](https://www.ruby-forum.com/t/how-to-use-sslrequirement-plugin/87877/3 "2007-03-06T20:51:22Z")

</div>

On 3/6/07, Joram [removed\_email\_address@domain.invalid](mailto:removed_email_address@domain.invalid) wrote:

> ssl\_required :login  
> Filter chain halted as  
> [#\<ActionController::Filters::ClassMethods::SymbolFilter:0x32678a4  
> @filter=:ensure\_proper\_protocol\>] returned false.  
> Completed in 0.00010 (10000 reqs/sec) | DB: 0.00000 (0%) | 302 Found  
> [[http://localhost/nephrology](http://localhost/nephrology)]
> 
> Anyway can help me out?

It’s doing exactly what it should - redirecting through https because  
the original request was http. For testing purposes you might want to  
override the ssl\_required? method to not bother redirecting unless in  
production.

```
def ssl_required?
  ((self.class.read_inheritable_attribute(:ssl_required_actions)

```

|| []).include?(action\_name.to\_sym)) && RAILS\_ENV == ‘production’  
end

Hope this helps.

–  
Zack C.  
[http://depixelate.com](http://depixelate.com)

---

<div class="post-metadata">

**Author:** ![Joram](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/e8c25b/32.png) [@Joram](https://www.ruby-forum.com/u/Joram)\
**Post date:** [February 17, 2010, 4:09am UTC](https://www.ruby-forum.com/t/how-to-use-sslrequirement-plugin/87877/4 "2010-02-17T04:09:23Z")

</div>

Joram wrote:

> I read somewhere that I should run another instance of webrick, on a  
> https port, is this correct?

No. You need to run a separate web server to handle the SSL requests.  
It will then forward all requests to your Webrick or Mongrel instances.  
See [Building  
Web Apps](http://www.buildingwebapps.com/articles/6401-using-ssl-in-rails-applications) for a pretty good tutorial.

---

<div class="post-metadata">

**Author:** ![Joram](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/e8c25b/32.png) [@Joram](https://www.ruby-forum.com/u/Joram)\
**Post date:** [March 6, 2007, 9:20pm UTC](https://www.ruby-forum.com/t/how-to-use-sslrequirement-plugin/87877/5 "2007-03-06T21:20:26Z")

</div>

Thanks for the feedback, Eric and Zack.

It redirects correct, the url is going to the https:/localhost/  
(notice no port!)  
But then an error number is returned (-122…).

I read somewhere that I should run another instance of webrick, on a  
https port, is this correct?