sessions between http and https

rubyonrails-talk
1

I have an online store I created and I've been saving a "shopping_cart_id" in the session which references a data object.

I added "ssl_requirement" to the site and I put the Order Summary, Checkout, and Confirm pages behind SSL. The only problem is that the Order Summary page needs that session from "http" to access the shopping cart data.

Is there a way to persist the session between http and https?

Or should I simply put all shopping cart actions behind SSL?

Or can I use "active_record_store" to solve my problems?

Any advice would be much appreciated.

Thanks, Andy

2

Yes.

3

I switched to active_record_store and I took my shopping cart out from behind SSL.

I'm creating session[:shopping_cart_id] WITHOUT SSL

But when I try to access session[:shopping_cart_id], I'm getting an error.

Any ideas?

4

After a little digging, I discovered that if I have the page with the form to ADD to the shopping cart NON-SSL, and I submit a form to an SSL page, I lose the form data.

Given that, I MUST put my shopping cart on a NON-SSL page...

But I still don't know how to persist the shopping cart between HTTP AND HTTPS.

Any ideas?

5

Any ideas anyone?

Can I access the session between SSL and non-SSL?

Thanks, Andy

6

Andy wrote:

Any ideas anyone?

Can I access the session between SSL and non-SSL?

Thanks, Andy

If you get no help from here, you should go ask on freenode's rubyonrails channel.. There's a couple of really competent rails guys there who are usually quite helpful.