I am right now developing web APIs with Ruby on Rails. When the Rails app receives POST request without any csrf token, the following error message shall ha
For rails 4 it should be
skip_before_action :verify_authenticity_token, only: [:one_or_two_actions_here]
Note that you should avoid skipping verify_authenticity_token on all actions of your controller, instead use the option only
to skip only where you have to. See the docs
You can do this by adding
skip_before_filter :verify_authenticity_token
to your controller. This way all incoming requests to the controller skips the :verify_authenticity_token filter.