Merge pull request rails#19682 from supercaracal/fix_force_ssl_redirection_flash_error

Fix fails to force_ssl_redirection if session_store is disabled

Author: rafaelfranca

actionpack/lib/action_controller/metal/force_ssl.rb

@@ -89,7 +89,7 @@ def force_ssl_redirect(host_or_options = nil)
         end
 
         secure_url = ActionDispatch::Http::URL.url_for(options.slice(*URL_OPTIONS))
-        flash.keep if respond_to?(:flash)
+        flash.keep if request.respond_to?(:flash)
         redirect_to secure_url, options.slice(*REDIRECT_OPTIONS)
       end
     end

actionpack/lib/action_controller/test_case.rb

@@ -619,7 +619,9 @@ def process(action, http_method = 'GET', *args)
         @request.assign_parameters(@routes, controller_class_name, action.to_s, parameters)
 
         @request.session.update(session) if session
-        @request.flash.update(flash || {})
+
+        is_request_flash_enabled = @request.respond_to?(:flash)
+        @request.flash.update(flash || {}) if is_request_flash_enabled
 
         @controller.request  = @request
         @controller.response = @response
@@ -640,7 +642,8 @@ def process(action, http_method = 'GET', *args)
 
         @assigns = @controller.respond_to?(:view_assigns) ? @controller.view_assigns : {}
 
-        if flash_value = @request.flash.to_session_value
+        flash_value = is_request_flash_enabled ? @request.flash.to_session_value : nil
+        if flash_value
           @request.session['flash'] = flash_value
         end
 

actionpack/test/controller/force_ssl_test.rb

@@ -321,4 +321,29 @@ def test_banana_does_not_redirect_if_already_https
     assert_response 200
     assert_equal 'ihaz', response.body
   end
+
+  def test_banana_redirects_to_https_if_not_https_and_flash_middleware_is_disabled
+    disable_flash
+    get :banana
+    assert_response 301
+    assert_equal 'https://test.host/redirect_to_ssl/banana', redirect_to_url
+  ensure
+    enable_flash
+  end
+
+  private
+
+  def disable_flash
+    ActionDispatch::TestRequest.class_eval do
+      alias_method :flash_origin, :flash
+      undef_method :flash
+    end
+  end
+
+  def enable_flash
+    ActionDispatch::TestRequest.class_eval do
+      alias_method :flash, :flash_origin
+      undef_method :flash_origin
+    end
+  end
 end