Class: ActionDispatch::AssumeSSL

Inherits:
Object
  • Object
show all
Defined in:
lib/action_dispatch/middleware/assume_ssl.rb

Overview

# Action Dispatch AssumeSSL

When proxying through a load balancer that terminates SSL, the forwarded request will appear as though it’s HTTP instead of HTTPS to the application. This makes redirects and cookie security target HTTP instead of HTTPS. This middleware makes the server assume that the proxy already terminated SSL, and that the request really is HTTPS.

Instance Method Summary collapse

Constructor Details

#initialize(app) ⇒ AssumeSSL

Returns a new instance of AssumeSSL.



14
15
16
 
# File 'lib/action_dispatch/middleware/assume_ssl.rb', line 14

def initialize(app)
  @app = app
end

Instance Method Details

#call(env) ⇒ Object 



18
19
20
21
22
23
24
25
 
# File 'lib/action_dispatch/middleware/assume_ssl.rb', line 18

def call(env)
  env["HTTPS"] = "on"
  env["HTTP_X_FORWARDED_PORT"] = "443"
  env["HTTP_X_FORWARDED_PROTO"] = "https"
  env["rack.url_scheme"] = "https"

  @app.call(env)
end