devise
devise copied to clipboard
CSRF Not being disabled even when told to
I tried to stop CSRF for API in application_controller.rb with skip_before_action :verify_authenticity_token
It worked well until I generated devise views for custom logging.
Now, CSRF keeps working even if I tried to add skip_before_action :verify_authenticity_token to the registrations_controller.rb
I'm not sure if this is a bug or misuse
NVM, it's devise custo, views that changed the needed JSON
Have you updated your routes.rb file to use the devise's registrations_controller.rb ?