Rails 6 安全 cookie 问题

Question

我在 ubuntu 上安装了 spree 电子商务。在我用 ngnix 设置 https 之前，一切都很好。现在我无法登录生产中的应用程序。

应用程序正常运行，然后只有登录和注册问题。

如果我设置 config.force_ssl = true 我会遇到很多重定向错误。

请有任何想法。谢谢。

server {
  server_name test.shenanay.com;

  root /home/ubuntu/she/public;

  try_files $uri/index.html $uri.html @app;

  location @app {
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Host $http_host;
    proxy_redirect off;
    proxy_pass http://test.shenanay.com:3000;
    proxy_set_header origin 'https://test.shenanay.com';
    proxy_cookie_path / "/; HTTPOnly; Secure";
  }

  # some other configuration

    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/test.shenanay.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/test.shenanay.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

server {
    if ($host = test.shenanay.com) {
        return 301 https://$host$request_uri;
   } # managed by Certbot


  listen 80;
  server_name test.shenanay.com;
    return 404; # managed by Certbot

Answer 1

这解决了问题。

https://github.com/rails/rails/issues/22965

谢谢。