skip/disable force_ssl for particular controller in rails

Question

I need to force SSL on all routes in my application except for message#new controller.

In config/environments/production.rb, I have:

config.force_ssl = true

Now all routes being redirect to https, And now I want to disable that for message#new controller.

Does anyone know how to disable force SSL for particular controller in a Rails 4+ application?

Answer 1

skip_before_action :verify_authenticity_token
force_ssl except: [:index,:create]

Its worked for me.

Answer 2

according to documentation following should work (but only for rails > 5 version):

config.ssl_options = {
  redirect: {
    exclude: -> request { request.path =~ /healthcheck/ }
  }
}