Files
danbooru/app/logical
evazion 2d34e69737 api: disable csrf protection for api requests.
Fixes POST/PUT API requests failing with InvalidAuthenticityToken errors
due to missing CSRF tokens.

CSRF protection is only necessary for cookie-based authentication. For
non-cookie-based authentication we can safely disable it. That is, if
the user is already passing their login + api_key, then we don't need
to additionally verify the request with a CSRF token.

ref: 2e407fa476 (comments)
2019-08-24 22:55:35 -05:00
..
2018-08-24 12:10:51 -07:00
2018-08-03 17:40:00 -07:00
2018-01-13 20:55:52 -08:00
2019-08-01 00:06:18 -05:00
2018-09-11 14:19:17 -07:00
2018-08-24 12:10:51 -07:00
2018-06-23 11:15:14 -07:00
2018-08-24 12:10:51 -07:00
2017-10-12 16:36:17 -07:00
2018-02-22 11:15:42 -08:00
2017-02-21 13:40:52 -08:00