/omniauth-jets_csrf_protection

Provides CSRF protection on OmniAuth request endpoint on Jets application

Primary LanguageRubyMIT LicenseMIT

Omniauth - Jets CSRF Protection

Gem Version

BoltOps Badge

BoltOps Learn Badge

This gem provides protection against CVE-2015-9284 (Cross-Site Request Forgery on the request phase when using OmniAuth gem with a Ruby on Jets application) for Jets applications using OmniAuth gem. It achieves this by integrating a CSRF token verifier that leverages the ActionController::RequestForgeryProtection.

This is a fork of cookpad/omniauth-rails_csrf_protection. Credit goes to the original authors of that gem.