ActiveResource and InvalidAuthenticityToken exception

Jeff
Sun, 28 Sep 2008 06:16:17 -0000

Hi,

I have a Rails 2.1.1 web app, and a Rails 2.1.1 app acting as a client
by using ActiveResource.

From the client, I can find, create, and update resources owned by the
web app.

However, I can not delete any.  Calling the .destroy method in
ActiveResource generates a 422 from the web app.

Not sure why this would be the case, since I thought
protect_from_forgery only protects HTML and JS requests.

Any idea if this is a bug in ActiveResource that I should dig into, or
is this actually by design and I''m not understanding something about
how to achieve deletes via ActiveResource?

Thanks!
Jeff