Why is Rails the authenticity token the only param that my app is passing?

Question

I have a Rails app built on a scaffold. For some reason, whenever I try to go to the index page from the edit page, I get the following error:

ActionController::ParameterMissing in PostsController#create

and the only parameter it has is the authenticity token:

Parameters: {"authenticity_token"=>"foobarbazrandomcharactershere"}

Both the edit and index actions in the controller are straightforward:

  def index
    @posts = Post.all
    if params[:tag]
      @posts = Post.tagged_with(params[:tag])
     else
      @posts = Post.all
    end
  end

Why is it passing the authenticity token and no other parameters?

I'm confused, you said the error occurs when you attempt to navigate TO the index page FROM the edit page, but the error you displayed says it is in the create method, which would only happen on a POST. Can you clarify? — Paul Richter
– Paul Richter, Commented Jan 21, 2014 at 23:43

Choylton B. Higginbottom · Accepted Answer · 2014-01-22 17:18:00Z

1

The issue was I had changed a link_to to a button_to, and button_to was specifying POST by default. The fix was to add a :method argument to button_to :

<%= button_to 'Home', posts_path, method: 'get' %>

answered Jan 22, 2014 at 17:18

Choylton B. Higginbottom

2,3343 gold badges24 silver badges36 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Paul Richter Over a year ago

Just out of curiousity, why do you need to use a button? With correct styling, you can make a link look like a nice-looking button, if that is what you're looking for, and then you don't need to worry about the method: 'get' stuff.

Choylton B. Higginbottom Over a year ago

Teeg, you are correct. I found that using link_to and a styled div worked too, I just wanted to solve the problem instead of using a workaround.

Chloe · Accepted Answer · 2014-01-23 01:48:19Z

0

It passes that to protect from XSSR: http://guides.rubyonrails.org/security.html#csrf-countermeasures.

We have to see your edit view. It is trying to access params[:tag], which is not available. I believe that the edit view is distorted, and the form fields are outside of the form tag, and so they are not being sent back. Show the edit view ERB/HAML and the HTML that it generates, then highlight the form element you are trying to submit.

edited Jan 23, 2014 at 1:48

answered Jan 21, 2014 at 23:37

Chloe

26.5k45 gold badges211 silver badges380 bronze badges

1 Comment

Paul Richter Over a year ago

Admittedly, the OP's title is misleading, but this is not quite what they are asking.

Collectives™ on Stack Overflow

Why is Rails the authenticity token the only param that my app is passing?

2 Answers 2

2 Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related