George Deglin
2008-Sep-08 23:49 UTC
[Facebooker-talk] InvalidAuthenticityToken when user adds application through facebook registration
If a user that has not yet signed up for Facebook attempts to visit an application page facebook presents them with a registration form. After this form is completed, the application is automatically added to the user''s account and Facebook displays the following message: Welcome George Tesster! Your account has been created. [application] has been added to your account. Facebook also issues a post request similar to the following: Processing HomeController#index (for 127.0.0.1 at 2008-09-08 16:36:48) [POST] Session ID: b3286f3c51ba8da745b45732-1487557007 Parameters: {"fb_sig_time"=>"1220917013.3643", "fb_sig"=>"95fcf4dabcc91059e5c8452155708142", "installed"=>"1", "action"=>"inde x", "fb_sig_session_key"=>"b3286f3c51ba8da745b45732-1487557007", "auth_token"=>"a3a7138b014d8a4ceedc6fdbc3cd3822", "controller">"home", "fb_sig_expires"=>"0", "fb_sig_added"=>"1", "fb_sig_api_key"=>"06565c8dc05254276bcffcff049f604b", "fb_sig_profile_updat e_time"=>"0", "fb_sig_user"=>"1487557007", "fb_sig_registration"=>"1"} Rails then throws the following error: ActionController::InvalidAuthenticityToken (ActionController::InvalidAuthenticityToken): c:/ruby/lib/ruby/gems/1.8/gems/actionpack-2.1.0/lib/action_controller/request_forgery_protection.rb:86:in `verify_authenticity_token'' -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://rubyforge.org/pipermail/facebooker-talk/attachments/20080908/ddc24074/attachment.html>