跳到內容 跳到搜尋

Action Dispatch AssumeSSL

當使用終止 SSL 的負載平衡器進行代理時,轉送的要求將會對應用程式顯示為 HTTP,而非 HTTPS。這會讓重新導向和 Cookie 安全性以 HTTP 為目標,而非 HTTPS。這個中間件讓伺服器假設代理伺服器已經終止 SSL,而要求實際上是 HTTPS。

方法
C
N

類別公用方法

初始化 (new)(app)

# File actionpack/lib/action_dispatch/middleware/assume_ssl.rb, line 14
def initialize(app)
  @app = app
end

實例公用方法

呼叫 (call)(env)

# File actionpack/lib/action_dispatch/middleware/assume_ssl.rb, line 18
def call(env)
  env["HTTPS"] = "on"
  env["HTTP_X_FORWARDED_PORT"] = "443"
  env["HTTP_X_FORWARDED_PROTO"] = "https"
  env["rack.url_scheme"] = "https"

  @app.call(env)
end