ruby-on-railsrubyruby-on-rails-4ssl

skip/disable force_ssl for particular controller in rails


I need to force SSL on all routes in my application except for message#new controller.

In config/environments/production.rb, I have:

config.force_ssl = true

Now all routes being redirect to https, And now I want to disable that for message#new controller.

Does anyone know how to disable force SSL for particular controller in a Rails 4+ application?


Solution

  • skip_before_action :verify_authenticity_token
    force_ssl except: [:index,:create]
    

    Its worked for me.