csrf_controller.rb

class CsrfController < ApplicationController

  def index
    render json: { request_forgery_protection_token => form_authenticity_token }.to_json
  end
  
end

example.js

// app/initializers/csrf.js
export default {
  name: 'csrf',
  initialize: function(container, app) {
    app.inject('route', 'csrf', 'service:csrf');
    app.inject('controller', 'csrf', 'service:csrf');
  }
};
 
// app/services/csrf.js
 
export default Em.Object.extend({
  fetchToken: function() {
    var _this = this;
 
    return Em.$.ajax({
      url: '/csrf'
    }).done( function(data) {
      // TODO: Error check
      var param = Object.keys(data)[0];
      _this.set('token', data);
      _this.set('param', param);
    });
  }
});
 
// app/routes/application.js
 
export default Ember.Route.extend({
  beforeModel: function() {
    return this.csrf.fetchToken();
  }
});
 
// app/controllers/something.js
// ...
// You can now use this.get('csrf.token')

You could drop lines 22–25 and just access the token in routes and controllers like this:

this.get('csrf.token');

@jgwhite oh thanks!

@leepfrog @jgwhite thanks, I just used this for an app I'm moving to ember-cli, and refactor some parts to use ic-ajax abuiles/facturas@675d6c7