From f6cd7a345651388b54912e993d067a36301f507f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Alberto=20Miedes=20Garc=C3=A9s?= Date: Sun, 13 Nov 2016 20:07:09 +0100 Subject: [PATCH] Disable CSRF protection for GraphQL controller Related documentation at: http://api.rubyonrails.org/classes/ActionController/RequestForgeryProtec tion/ClassMethods.html --- app/controllers/graphql_controller.rb | 1 + 1 file changed, 1 insertion(+) diff --git a/app/controllers/graphql_controller.rb b/app/controllers/graphql_controller.rb index 665e6b93d..f1f4795ae 100644 --- a/app/controllers/graphql_controller.rb +++ b/app/controllers/graphql_controller.rb @@ -1,5 +1,6 @@ class GraphqlController < ApplicationController + skip_before_action :verify_authenticity_token skip_authorization_check def query