search

pelargir / auto-session-timeout

Provides automatic session timeout in a Rails application.
MIT License
126 stars 63 forks source link

Remove protect_from_forgery call #47

Closed jlcapps closed 5 months ago

jlcapps commented 5 months ago

The #active and #timeout actions are defined with http GETs. protect_from_forgery is not required for http GET calls, and setting the protect_from_forgery with these actions causes an exception when using the rails configuration option raise_on_missing_callback_actions. Therefore remove the call.

See also: https://github.com/pelargir/auto-session-timeout/issues/46

pelargir commented 5 months ago

@jlcapps thanks!