ankane/pretender

Issue with forgery protection and Rails 3.2

Opened this issue · 3 comments

Hey @ankane, just a quick issue where I wanted to say thanks for this Gem...I just found it useful for an app I'm working on. Also, I wanted to suggest a README update specific to Rails 3.2.

I had to add an extra line above my controller methods

  skip_before_filter :verify_authenticity_token, only: [:impersonate, :stop_impersonating]

Feel free to drop this line into your README where it makes the most sense. Basically, for Rails 3.2 you have to skip the forgery protection before filters while switching users.

Also, for Rails 4, this would be

  skip_before_action :verify_authenticity_token, only: [:impersonate, :stop_impersonating]

I think this may be related to how your specific routes are setup.

Cleaning up issues