I am right now developing web APIs with Ruby on Rails. When the Rails app receives POST request without any csrf token, the following error message shall ha
Note that you should avoid skipping verify_authenticity_token on all actions of your controller, instead use the option only to skip only where you have to. See the docs