File upload field causing ActionController::InvalidAuthenticityToken exception

Question

Using rails 4, and trying to add a file field to an existing form, using simple_form and paperclip.

Here's the critical part of the form:

<%= simple_form_for(@employee, html: { class: 'form-horizontal requires', multipart: true}, remote: true) do |f| %>

    <%= f.input :avatar %>

<% end %>

Everything works ok, unless I actually submit the form with an uploaded file. Then, I get this:

ActionController::InvalidAuthenticityToken in EmployeesController#update

What am I doing wrong here?

I believe your answer is [here][1] Looks like new with rails 4. [1]: stackoverflow.com/questions/16258911/rails-4-authenticity-token — Arthur Frankel
– Arthur Frankel, Commented Sep 3, 2013 at 15:59
The problem is combining multipart with remote: true. This will force the form submission as HTML rather than JS. Removing the multipart will force it as JS, but then you cannot upload a file. Obviously, this is a bug, and the remotipart gem apparently is a fix. — Daniel Viglione
– Daniel Viglione, Commented Jun 15, 2018 at 21:41

Hunter · Accepted Answer · 2014-11-02 07:00:07Z

21

The simplest solution would just be to add authenticity_token: true to your form. Like this:

<%= form_for @employee, html: { class: 'form-horizontal requires'}, multipart: true, remote: true, authenticity_token: true  do |f| %>
  <%= f.input :avatar %>
<% end %>

answered Nov 2, 2014 at 7:00

Hunter

1,7871 gold badge18 silver badges26 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Avishai Over a year ago

adding authenticity_token: true worked like a charm :-)

golfadas Over a year ago

be warned that remote: true option will be ignored and the form is submitted as html. If you want to submit the form as js look at William answer.

Ricardo Binns · Accepted Answer · 2014-01-09 19:37:58Z

20

I was with the same problem. <%= token_tag form_authenticity_token %> didn't work for me.

Install gem remotipart solved my problem. remotipart

edited Jan 9, 2014 at 19:37

Ricardo Binns

3,2466 gold badges46 silver badges71 bronze badges

answered Jan 9, 2014 at 19:35

William Weckl

2,4654 gold badges29 silver badges44 bronze badges

1 Comment

David Routen Over a year ago

This is the actual answer if you are trying to submit a file using remote: true and wanting to respond using a js.erb file. Install the remotipart gem (very quick and easy) and it works like a charm.

Collectives™ on Stack Overflow

File upload field causing ActionController::InvalidAuthenticityToken exception

2 Answers 2

2 Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related