Require HTTPS for login, register, etc...
Reported by Matias Korhonen | 2009-05-21 13:03:53 UTC | in 0.5
We should require HTTPS for the login and registration pages. There should also be a setting in the settings file to disable this if you don't have a certificate available...
http://www.swards.net/2006/12/redirecting-to-https-in-rails.html
Comments and changes to this ticket
-

Matias Korhonen 2009-05-24 17:28:47 UTC
- State changed from new to open
(from [4da4fe455e0af2f9a5fcba3904c2e0c2ee0bbaf4]) Added new constant for HTTPS config [#122 state:open] http://github.com/k33l0r/hhlc/commit/4da4fe455e0af2f9a5fcba3904c2e0...
-

Matias Korhonen 2009-05-24 17:28:47 UTC
(from [db18a4f6347a4f7da0acedf16e34444a8337e67b]) Added link to HTTPS login form if using HTTP [#122] http://github.com/k33l0r/hhlc/commit/db18a4f6347a4f7da0acedf16e3444...
-

Matias Korhonen 2009-05-24 17:28:48 UTC
- State changed from open to testing
(from [125c63c55610f086c882a210191deed2acadb05a]) Added new before_filter to require HTTPS for certain actions [#122 state:testing]
http://github.com/k33l0r/hhlc/commit/125c63c55610f086c882a210191dee... -

-

Matias Korhonen 2009-08-04 17:36:17 UTC
The login has changed since this was marked as 'testing', so I'm going to reopen the ticket.
-

Matias Korhonen 2009-08-04 17:37:42 UTC
- State changed from testing to open
-

Matias Korhonen 2009-08-11 00:24:24 UTC
(from [eca1161d4264b0d2198b20d20f792313d0f11904]) Small fix to HTTPS link on the login page [#122] http://github.com/k33l0r/hhlc/commit/eca1161d4264b0d2198b20d20f7923...
-

Matias Korhonen 2009-08-11 00:25:09 UTC
- Milestone changed from 0.5 to 0.5.5 (Bug fix galore)
Bugger it, I can't figure out how to get the login form to submit through HTTPS on HTTP pages.
-

Matias Korhonen 2009-08-17 13:54:10 UTC
(from [cf32145191e05216993be369edf814a1e6c38b56]) Enabled submission to HTTPS for logins [#122] http://github.com/k33l0r/hhlc/commit/cf32145191e05216993be369edf814...
-

Matias Korhonen 2009-08-18 14:32:35 UTC
(from [3016a54e370946b856f3504dcbe8d99676fe4972]) Reverted login page to remove unneeded HTTPS code. [#122] http://github.com/k33l0r/hhlc/commit/3016a54e370946b856f3504dcbe8d9...
-

Matias Korhonen 2009-08-18 18:05:53 UTC
(from [34ccabde9f232f97b54766df0b8e9301ce612cd7]) Require HTTPS for most of the frontend pages. [#122] http://github.com/k33l0r/hhlc/commit/34ccabde9f232f97b54766df0b8e93...
-

Matias Korhonen 2009-08-18 18:59:08 UTC
(from [acfb042f194cc592f04e1f1ed080cfe40efffa56]) Renamed the https setting to HTTPS_ENABLED. [#122] http://github.com/k33l0r/hhlc/commit/acfb042f194cc592f04e1f1ed080cf...
-

Matias Korhonen 2009-08-18 21:25:29 UTC
- State changed from open to resolved
- Milestone changed from 0.5.5 (Bug fix galore) to 0.5
Hurrah! Finally it works.
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
Ruby on Rails web application for the HAAGA-HELIA Linux Club.
People watching this ticket
Tags
Referenced by
-
122
Require HTTPS for login, register, etc...
(from [eca1161d4264b0d2198b20d20f792313d0f11904])
Small f...
-
122
Require HTTPS for login, register, etc...
(from [cf32145191e05216993be369edf814a1e6c38b56])
Enabled...
-
122
Require HTTPS for login, register, etc...
(from [3016a54e370946b856f3504dcbe8d99676fe4972])
Reverte...
-
122
Require HTTPS for login, register, etc...
(from [34ccabde9f232f97b54766df0b8e9301ce612cd7])
Require...
-
122
Require HTTPS for login, register, etc...
(from [acfb042f194cc592f04e1f1ed080cfe40efffa56])
Renamed...
-
122
Require HTTPS for login, register, etc...
(from [4da4fe455e0af2f9a5fcba3904c2e0c2ee0bbaf4])
Added n...
-
122
Require HTTPS for login, register, etc...
(from [db18a4f6347a4f7da0acedf16e34444a8337e67b])
Added l...
-
122
Require HTTPS for login, register, etc...
(from [125c63c55610f086c882a210191deed2acadb05a])
Added n...
-
122
Require HTTPS for login, register, etc...
(from [102bcba87a6af7cf27adddb930faece23dc027b6])
Changed...