How to generate csrf token for API?

Question

I'm developing some API for my mobile app, and I want to add some action to render CSRF token in JSON. I know that there is helper csrf_meta_tags for HTML views, but how can I do it in controller? Thanks in advance.

Baldrick · Accepted Answer · 2013-12-31 15:29:30Z

4

You can use form_authenticity_token in the controller. It uses session[:_csrf_token] as suggested by @user123, and also initialize it if it has not been done yet (see source).

answered Dec 31, 2013 at 15:29

Baldrick

24.4k6 gold badges76 silver badges80 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Baldrick · Accepted Answer · 2013-12-31 15:23:21Z

2

use the value in

session[:_csrf_token]

edited Dec 31, 2013 at 15:23

Baldrick

24.4k6 gold badges76 silver badges80 bronze badges

answered Dec 31, 2013 at 15:13

junil

7785 silver badges12 bronze badges

Collectives™ on Stack Overflow

How to generate csrf token for API?

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related