Mon Jul 16 11:37:11 EST 2007 Matt Palmer * Improve the documentation of the directives a bit diff -rN -u old-bugfixes/README new-bugfixes/README --- old-bugfixes/README 2008-10-20 23:31:06.824879235 +1100 +++ new-bugfixes/README 2008-10-20 23:31:06.824879235 +1100 @@ -5,6 +5,16 @@ should only be allowed to run under SSL, and if they're accessed without it, they should be redirected. +Two class-level directives are provided: + + ssl_required -- specify symbols of actions that *must* be accessed via + SSL, any non-SSL accesses will be redirected to a https:// version; + ssl_allowed -- specify symbols of actions that can be accessed via SSL + (or not, we don't care). + +Any action not mentioned in one of these directives will be prohibited from +using SSL, and the action will be redirected to a non-SSL version. + Example: class ApplicationController < ActiveRecord::Base @@ -40,4 +50,4 @@ times you'll want to run other before_filters before that. They should then be declared ahead of including this module. -Copyright (c) 2005 David Heinemeier Hansson, released under the MIT license \ No newline at end of file +Copyright (c) 2005 David Heinemeier Hansson, released under the MIT license