Re: authenticity_token sent, still InvalidAuthenticityToken

Frederick Cheung
2008-10-14T15:25:29Z

On 14 Oct 2008, at 16:13, Anjan Tek wrote:

>
> I don''t understand what you want me to do exactly. Isn''t
the
> authenticity token being sent from the HTML to Flex in the first
> place?
> That same value is coming back from flex as a POST variable, right?
>
> So how would they differ?
>
> Do you want me to put a text field in the HTML and put the
> authenticity
> token into it and check if the POST value matches it?
>

One avenue to explore is that the authenticity token is based on the
session (either a value in it, or the session etc...) if the flex
stuff doesn''t use rails'' session cookie then you would get an
invalid
authenticity token error.

Fred