Force SSL using ssl_requirement in Rails 2 app
Use a Rack Middleware. # lib/force_ssl.rb class ForceSSL def initialize(app) @app = app end def call(env) if env[‘HTTPS’] == ‘on’ || env[‘HTTP_X_FORWARDED_PROTO’] == ‘https’ @app.call(env) else req = Rack::Request.new(env) [301, { “Location” => req.url.gsub(/^http:/, “https:”) }, []] end end end # config/environment.rb config.middleware.use “ForceSSL”