Class: ActionDispatch::SSL

Inherits:
Object show all
Defined in:
actionpack/lib/action_dispatch/middleware/ssl.rb

Constant Summary collapse

YEAR = 
31536000

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(app, options = {}) ⇒ SSL

Returns a new instance of SSL.



9
10
11
12
13
14
15
16
17
18
 
# File 'actionpack/lib/action_dispatch/middleware/ssl.rb', line 9

def initialize(app, options = {})
  @app = app

  @hsts = options.fetch(:hsts, {})
  @hsts = {} if @hsts == true
  @hsts = self.class.default_hsts_options.merge(@hsts) if @hsts

  @host    = options[:host]
  @port    = options[:port]
end

Class Method Details

.default_hsts_options ⇒ Object 



5
6
7
 
# File 'actionpack/lib/action_dispatch/middleware/ssl.rb', line 5

def self.default_hsts_options
  { :expires => YEAR, :subdomains => false }
end

Instance Method Details

#call(env) ⇒ Object 



20
21
22
23
24
25
26
27
28
29
30
31
 
# File 'actionpack/lib/action_dispatch/middleware/ssl.rb', line 20

def call(env)
  request = Request.new(env)

  if request.ssl?
    status, headers, body = @app.call(env)
    headers = hsts_headers.merge(headers)
    flag_cookies_as_secure!(headers)
    [status, headers, body]
  else
    redirect_to_https(request)
  end
end