Problems with Rails 3 protect_from_forgery

Question

I have two applications that need to communicate with each other via HTTP. One is a PHP application, and the other is my main application, a Rails application. I need a PHP application to talk to a Rails application by sending it POST data, but when I do this, I get a Notual Authenticity Token error. Anyway, around? Or how can I create my own email token to authenticate my Rails application?

Answer 1

The documentation for ActionController :: RequestForgeryProtection :: ClassMethods

You can skip the authentication token requirement either by specifying or: except or by forcing the filter before. Example from the documentation ...

class FooController < ApplicationController protect_from_forgery :except => :index # you can disable csrf protection on controller-by-controller basis: skip_before_filter :verify_authenticity_token end