CODEWITHSUNDEEP
ruby-on-railscsrf-protection
Pavel Kalashnikov
Pavel Kalashnikov

Reputation: 2091

rails protect_from_forgery raises with exception

I have Rails project which is working on production. But on localhost it raises on every POST request with ActionController::InvalidAuthenticityToken. I know what is it. AuthToken is protection from csrf attacks. I have in my application_controller.rb

protect_from_forgery with: :exception #this line raise exception

and csrf_meta_tags present. I have no any problems in other Rails projects with it.

If I remove param with: :exception session will reset after reloading page.

what is the problem?

Upvotes: 0

Views: 716

Answers (2)

Pavel Kalashnikov
Pavel Kalashnikov

Reputation: 2091

Problem solved!

Project has config in config/environments/development.rb

Rails.application.routes.default_url_options[:host] = 'my_project.dev:3000'

I tried to load project on localhost:3000, but url was my_project.dev:3000.

Upvotes: 1

Jeet
Jeet

Reputation: 1380

Can you try this 

protect_from_forgery with: :null_session

Upvotes: 1

Related Questions