Rails - Apr 2008 - InvalidAuthenticityToken exception when deleting cookies

Hello,

I''ve been testing my project with some manual tests. One of them 
consists of deleting cookies ("clean personal info" in firefox) just 
before submit the login form. Then, I get an error.

The error message is: ActionController::InvalidAuthenticityToken in 
SessionsController#create

I''m on Rails 2.0.2 with restful_authentication plugin. I''m
using default
cookie session store, too.

Any idea?

Thanks.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Talk" group.
To post to this group, send email to
rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
To unsubscribe from this group, send email to
rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---

On 15 Apr 2008, at 19:40, Sergio wrote:
> The error message is: ActionController::InvalidAuthenticityToken in
> SessionsController#create
>
> Any idea?
This is Rails CSRF protection kicking in, see:

http://api.rubyonrails.com/classes/ActionController/RequestForgeryProtection.html

Try reloading the page with the form before submitting.

Will.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Talk" group.
To post to this group, send email to
rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
To unsubscribe from this group, send email to
rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---

On 15 abr, 21:17, Will Jessop
<w...-bdD2QVCtGQZW7IvYoCtsgA@public.gmane.org>
wrote:
>
> Try reloading the page with the form before submitting.
But can I reload the page automatically before submitting? or I must
trust the user to do it... How can I avoid the user getting that
exception?

Thanks!
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Talk" group.
To post to this group, send email to
rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
To unsubscribe from this group, send email to
rubyonrails-talk-unsubscribe-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---

could you try to include prototype in your layout? It''s work for me :)

On 16 апр, 02:17, Will Jessop
<w...-bdD2QVCtGQZW7IvYoCtsgA@public.gmane.org>
wrote:
> On 15 Apr 2008, at 19:40, Sergio wrote:
>
> > The error message is: ActionController::InvalidAuthenticityTokenin
> > SessionsController#create
>
> > Any idea?
>
> This is Rails CSRF protection kicking in, see:
>
> http://api.rubyonrails.com/classes/ActionController/RequestForgeryPro...
>
> Try reloading the page with the form before submitting.
>
> Will.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Talk" group.
To post to this group, send email to
rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
To unsubscribe from this group, send email to
rubyonrails-talk-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---

Thank you, I tried it, but it doesn''t seem to fix the error.


On 19 abr, 10:46, mikhailov
<mikhailov.anat...-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
wrote:
> could you try to include prototype in your layout? It''s work for
me :)
>
> On 16 апр, 02:17, Will Jessop
<w...-bdD2QVCtGQZW7IvYoCtsgA@public.gmane.org> wrote:
>
> > On 15 Apr 2008, at 19:40, Sergio wrote:
>
> > > The error message is:
ActionController::InvalidAuthenticityTokenin
> > > SessionsController#create
>
> > > Any idea?
>
> > This is Rails CSRF protection kicking in, see:
>
>
>http://api.rubyonrails.com/classes/ActionController/RequestForgeryPro...
>
> > Try reloading the page with the form before submitting.
>
> > Will.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Talk" group.
To post to this group, send email to
rubyonrails-talk-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org
To unsubscribe from this group, send email to
rubyonrails-talk-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/rubyonrails-talk?hl=en
-~----------~----~----~----~------~----~------~--~---