Re: authenticity_token sent, still InvalidAuthenticityToken

Peter De Berdt
2008-11-23T10:28:05Z

On 23 Nov 2008, at 10:34, Anjan Tek wrote:

> Would your solution above work for Flex apps as well? I''m using no
> AJAX.
> Just Flex and rails. Even the upload is done from within Flex.
>
> As I''ve mentioned previously in the post, I am sending the
> authenticity
> token along with all my requests to rails. But the problem is that the
> authenticity token that is sent become invalid because of a changing
> Session ID.

If you look at the post about getting SWFUpload up and running, you''ll
notice there''s a patch for the session handling in there that allows
you to pass the session data as normal post parameters instead of a
cookie and make Rails detect and use it. Flex being a Flash-based
frontend, you should be able to do the same. My guess is that
ActionScript will have a similar way of automatically adding that data
to each request. Maybe someone on this list has already integrated a
Flexbased app this way (I know there are some Flex developers on this
list), else you''ll have to ask on a Flex forum/mailing list.


Best regards

Peter De Berdt