marshluca/csrf_token_in_rails_ajax_request.markdown

Last active August 29, 2015 14:05

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/marshluca/3bbbd603cf46db4decc4.js"></script>
Save marshluca/3bbbd603cf46db4decc4 to your computer and use it in GitHub Desktop.

CSRF token in Rails Ajax request

Raw

csrf_token_in_rails_ajax_request.markdown

class ApplicationController < ActionController::Base
  protect_from_forgery with: :exception
end

$(document).ajaxSend(function(e, xhr, options) {
  var token = $("meta[name='csrf-token']").attr("content");
  xhr.setRequestHeader("X-CSRF-Token", token);
});

http://api.rubyonrails.org/classes/ActionController/RequestForgeryProtection/ClassMethods.html