diff --git a/app/controllers/graphql_controller.rb b/app/controllers/graphql_controller.rb
index 665e6b93d..f1f4795ae 100644
--- a/app/controllers/graphql_controller.rb
+++ b/app/controllers/graphql_controller.rb
@@ -1,5 +1,6 @@
 class GraphqlController < ApplicationController
 
+  skip_before_action :verify_authenticity_token
   skip_authorization_check
 
   def query