Update README.md (#977)

Recommend checking against `Rails.configuration.force_ssl` boolean value in the example configuration. That way it is off in development & test environment by default.
thoughtbot · May 17, 2024 · 3ab1852 · 3ab1852
1 parent 6808c6c
commit 3ab1852
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/README.md b/README.md
@@ -62,7 +62,7 @@ Clearance.configure do |config|
   config.url_after_denied_access_when_signed_out = nil
   config.rotate_csrf_on_sign_in = true
   config.same_site = nil
-  config.secure_cookie = false
+  config.secure_cookie = Rails.configuration.force_ssl
   config.signed_cookie = false
   config.sign_in_guards = []
   config.user_model = "User"