Use temporary (302) redirects to force ssl in Ruby on Rails, rather than the standard configuration approach which uses permanent (301) redirects. This is useful when you may want to switch to a non-ssl environment later.

application_controller.rb

class ApplicationController < ActionController::Base
  
  ...
  
  # Redirect all requests to SSL. We use this rather than config.force_ssl since
  # we want to use temporary rather than permanent redirects.
  if Rails.env.production?
    before_filter do |controller|
      controller.force_ssl_redirect({:status => :found}) # 302: Moved temporarily
    end
  end
  
  ...
  
end