I am wondering the cleanest way to selectively enforce SSL.
Say I have an application with 10 controllers, each with 5 actions. I want SSL on all actions except for 2.
Rather than having 'ssl_required :action1, :action2, :action3, etc' in each controller, I thought, the best way would be to put it in the application.rb file. by modifying def ssl_required? call. My solution was to look for certain action names in the request object using Ruby String class functions, but I would be surprised if there was not an easier way to just using something.
Thanks.
David
