Rails CSRF with json requests

Question

Is there a way to make post/put/patch/delete requests from an android application to my rails application which responds with json files and at the same time have CSRF active on my server?

So in other words I want to have protection from forgery when making requests from my android app since it will have an ability to modify the webapp data.

Nick M · Accepted Answer · 2016-01-29 08:47:19Z

1

I think an impractical solution would be to create a method that outputs a CSRF token, and load this prior to each post/put request.

I usually take a different approach on my APIs that handle sensitive data though - I bypass CSRF and I use SSL for everything, validate certificates, and always post a checksum (based on a static API key and a hash for the current user which I output at login time) of the request which I verify on the server side before processing.

answered Jan 29, 2016 at 8:47

Nick M

2,5526 gold badges36 silver badges60 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Rails CSRF with json requests

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related