devise icon indicating copy to clipboard operation
devise copied to clipboard

CSRF Not being disabled even when told to

Open MUSTDOS opened this issue 1 year ago • 2 comments

I tried to stop CSRF for API in application_controller.rb with skip_before_action :verify_authenticity_token

It worked well until I generated devise views for custom logging.

Now, CSRF keeps working even if I tried to add skip_before_action :verify_authenticity_token to the registrations_controller.rb

I'm not sure if this is a bug or misuse

MUSTDOS avatar Jan 08 '25 14:01 MUSTDOS

NVM, it's devise custo, views that changed the needed JSON

MUSTDOS avatar Jan 09 '25 14:01 MUSTDOS

Have you updated your routes.rb file to use the devise's registrations_controller.rb ?

UmerQaisar avatar Mar 10 '25 07:03 UmerQaisar