tobmatth/rack-ssl-enforcer

Middleware use vs. insert_before

Opened this issue · 1 comments

Based on the README file, the SslEnforcer should be prepended into the middleware chain via insert_before:

config.middleware.insert_before  ActionDispatch::Cookies, Rack::SslEnforcer

But then all subsequent examples rely on use:

config.middleware.use Rack::SslEnforcer, :only_hosts => 'api.example.com'
...

Could you please explain what the proper/expected way of setting up the middleware is?

Seems like #90 caused this discrepancy.