Rails HTTP Auth plus SSL

rails_http_auth_ssl

# in controller_name.rb :
before_filter :http_auth

# in application_controller.rb :
def http_auth
   authenticate_or_request_with_http_basic do |username, password|
     username == "user" && password == "password"
   end
 end

# in 'script/rails' , insert the following before the APP_PATH line
# On ubuntu, find the certs in /etc/ssl/certs/

require 'rubygems'
require 'rails/commands/server'
require 'rack'
require 'webrick'
require 'webrick/https'

module Rails
  class Server < ::Rack::Server
    def default_options
      super.merge({
        :Port => 3000,
        :environment => (ENV['RAILS_ENV'] || "development").dup,
        :daemonize => false,
        :debugger => false,
        :pid => File.expand_path("tmp/pids/server.pid"),
        :config => File.expand_path("config.ru"),
        :SSLEnable => true,
        :SSLVerifyClient => OpenSSL::SSL::VERIFY_NONE,
        :SSLPrivateKey => OpenSSL::PKey::RSA.new(
             IO.read(File.expand_path("ssl-cert-snakeoil.key"))),
        :SSLCertificate => OpenSSL::X509::Certificate.new(
             IO.read(File.expand_path("ssl-cert-snakeoil.pem"))),
        :SSLCertName => [["CN", WEBrick::Utils::getservername]]
      })
    end
  end
end