skip/disable force_ssl for particular controller in rails

Question

I need to force SSL on all routes in my application except for message#new controller.

In config/environments/production.rb, I have:

<

Answer 1

Do this in MessagesController.rb -

  force_ssl except: [:new]

Answer 2

skip_before_action :verify_authenticity_token
force_ssl except: [:index,:create]

Its worked for me.

Answer 3

according to documentation following should work (but only for rails > 5 version):

config.ssl_options = {
  redirect: {
    exclude: -> request { request.path =~ /healthcheck/ }
  }
}