Getting Rails URL helpers to automatically output https urls

Question

I am developing a site that mixes http and https a lot - whats the best/easiest way to make the links use the right protocol for the route - can it be specified in the routes file?

Say I have the following route in Rails 3.

match "/test" => "test#index", :as => :test, :constraints => { :protocol => 'https' }

If I'm on a http page, and I use test_url(), it'll output http://domain.com/test. I want https://domain.com/test instead.

I know I can use test_url(:secure => true), but that's duplicating logic.

I know I could have http://domain.com/test to https://domain.com/test, but that's an extra redirect, plus it fails on form posts.

Ideas?

I think you can find the solution from the following question, http://stackoverflow.com/questions/3993651/ — nkm, Oct 12 '11 at 18:19
I don't know why this is so difficult in Rails. Surely most sites use HTTPS for login etc? — Adrian Macneil, Nov 08 '11 at 10:45

score 34 · Answer 1 · edited Apr 23 '18 at 04:52

34

Use test_url(:protocol => 'https') for https urls.

edited Apr 23 '18 at 04:52

Box Box Box Box

5,094
10
49
67

answered Feb 01 '13 at 08:54

Krishna Srihari

714
6
6

5

"I know I can use test_url(:secure => true), but that's duplicating logic." – Joe Van Dyk Feb 01 '13 at 21:47

score 20 · Answer 2 · edited Jul 17 '11 at 18:12

20

Haven't tried but add this in your ApplicationController:

def default_url_options(options={})
 { :secure => true }
end

edited Jul 17 '11 at 18:12

Joe Van Dyk

6,828
8
57
73

answered Jul 14 '11 at 21:09

apneadiving

114,565
26
219
213

This is a site that mixes http and https a lot though, I think that would make all the URLs https (right?) – Joe Van Dyk Jul 14 '11 at 21:29
yes, you're right, so you should only put this in the controllers having https – apneadiving Jul 14 '11 at 21:39
2

Still not sure how that helps me. If I'm on a http page, I want test_url() to return a https URL, not a http one. – Joe Van Dyk Jul 15 '11 at 16:36
13

ok, sorry about that. Remark: giving -1 to people trying to help you won't serve your cause. – apneadiving Jul 15 '11 at 16:42
2

Probably things changed, this no longer works in 5.1.4. See https://stackoverflow.com/a/48781000/474597 – lulalala Feb 14 '18 at 07:40

score 7 · Answer 3 · edited Aug 11 '16 at 16:49

7

def default_url_options(options={})
 { :protocol => "https" }
end

edited Aug 11 '16 at 16:49

Toby Speight

27,591
48
66
103

answered Aug 11 '16 at 11:32

i_emmanuel

519
6
6

7

Although this code may help to solve the problem, it doesn't explain _why_ and/or _how_ it answers the question. Providing this additional context would significantly improve its long-term value. Please [edit] your answer to add explanation, including what limitations and assumptions apply. – Toby Speight Aug 11 '16 at 16:48

score 4 · Answer 4 · answered Nov 09 '14 at 23:24

4

For Rails 3.2 I used a combination of @apneadiving's answer. Adding the below code to my ApplicationController

def default_url_options(options={})
  options.merge{ :protocol => "https" }
end

answered Nov 09 '14 at 23:24

Mark Ellul

1,906
3
26
37

score 2 · Accepted Answer · answered Feb 01 '13 at 21:48

2

It looks like this will be solved in Rails 4! https://github.com/rails/rails/commit/9b4514c3b8ecfbc40a44dbd4c2ebd4ce67f4a459

answered Feb 01 '13 at 21:48

Joe Van Dyk

6,828
8
57
73

score 1 · Answer 6 · edited May 23 '17 at 12:26

1

Rails 3 SSL routing redirects from https to http answers this question pretty well. In short, there's not a great way to do it. I submitted the following Rails bug: https://github.com/rails/rails/issues/3571

edited May 23 '17 at 12:26

Community

1
1

answered Nov 08 '11 at 20:17

Joe Van Dyk

6,828
8
57
73

score 0 · Answer 7 · answered Sep 16 '21 at 13:37

0

To generate https url, add an option called protocol with value https

test_url(protocol: 'https')

answered Sep 16 '21 at 13:37

Vasanth Saminathan

501
6
4

score -1 · Answer 8 · answered Oct 15 '11 at 04:50

-1

You can use a plugin called ss_requirement, it will provide you with methods like ssl_required ssl_allowed

You can simply add this in your controller to enable ot disable https on any action

ssl_allowed :login, :update_profile

https://github.com/rails/ssl_requirement

answered Oct 15 '11 at 04:50

Ross

1,562
1
15
26

That doesn't have anything to do with generating URLs. – Joe Van Dyk Oct 18 '11 at 03:51
In this case you generate your urls as normal, but its is submitted as SSL for the methods that you have mentioned – Ross Oct 18 '11 at 06:16
1

No, it's not. It will redirect the http post from http to https, losing the post data. – Joe Van Dyk Oct 18 '11 at 18:53

Getting Rails URL helpers to automatically output https urls

8 Answers8

Linked