I\'m working on user authentication in a Ruby on Rails web app using Devise gem. The process with very straight forward.
However, after adding Nginx and ssl certificate,
I temporarly modified actionpack gem.
In lib/action_controller/metal/request_forgery_protection.rb inside actionpack gem directory I updated:
def valid_request_origin? # :doc:
if forgery_protection_origin_check
# We accept blank origin headers because some user agents don't send it.
request.origin.nil? || request.origin == request.base_url
else
true
end
end
to be:
def valid_request_origin? # :doc:
if forgery_protection_origin_check
# We accept blank origin headers because some user agents don't send it.
request.origin.nil? || request.origin == request.base_url || request.base_url == ": https://<domain name>:80"
else
true
end
end