Bypassing session integrity check

rubyonrails-talk
1

I've a PDA application that posts data to a RoR web app. But I don't include a 'authenticity_token' field and the server is returning 'The change you wanted was rejected'. Removing 'config.action_controller.session' from environment.rb doesn't seem to work. Is there any way to tell RoR to ignore the session check for a set of controller actions?

Thanks, Mark

2

You can use the protect_from_forgery method, found the answer here: http://api.rubyonrails.org/classes/ActionController/RequestForgeryProtection/ClassMethods.html