I am trying to set up REST web service w Rails 2.0.2, I don''t have any problem with the GET url = "http://#{WWW_HOST}/posts/online.xml" result = Net::HTTP.get(URI(url)) I get the expected result but when I try to use a POST, url = URI.parse("http://#{WWW_HOST}//user/posts/createReference.xml") .. post_args1,...post_args2.... resp, data = Net::HTTP.post_form(url, {post_args1, post_args2} ) I get a 401 Unauthorized error (ERROR TYPE: ActionController::InvalidAuthenticityToken) In my server PostsController, I have a filter , but I wrote : class PostsController < ApplicationController before_filter :login_required, :except => [ :online, :createReference] so the login is not required for both actions online and createReference in my routes I have : map.resources :posts, :collection => {:online => :get} and map.resource :user, :controller => "users" do |user| user.resources :posts, :collection => {:createReference => :post } end I know that AuthenticityToken is quite new with 2.0 and forms I am using class ApplicationController < ActionController::Base include AuthenticationSystem, protect_from_forgery where should I start to investigate ? thanks for your help --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org To unsubscribe from this group, send email to rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en -~----------~----~----~----~------~----~------~--~---