Commit 326b157

mo khan <mo@mokhan.ca>
2019-08-17 19:34:55
force_ssl in production
1 parent a4af591
Changed files (2)
app
config
environments
app/controllers/metadata_controller.rb
@@ -1,7 +1,6 @@
 # frozen_string_literal: true
 
 class MetadataController < ApplicationController
-  force_ssl if: :ssl_configured?
   skip_before_action :authenticate!
 
   def show
@@ -15,8 +14,4 @@ class MetadataController < ApplicationController
       Idp.default(request).to_xml
     end
   end
-
-  def ssl_configured?
-    Rails.env.production?
-  end
 end
config/environments/production.rb
@@ -57,7 +57,7 @@ Rails.application.configure do
 
   # Force all access to the app over SSL, use Strict-Transport-Security,
   # and use secure cookies.
-  # config.force_ssl = true
+  config.force_ssl = true
 
   # Use the lowest log level to ensure availability of diagnostic information
   # when problems arise.