LG-438 Remove csrf protection on the account reset delayed notificati…

…ons API endpoint **Why**: The endpoint is already protected by an auth token **How**: skip_before_action :verify_authenticity_token
18F · Jul 3, 2018 · 6aec953 · 6aec953
1 parent e14a2c9
commit 6aec953
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/app/controllers/account_reset/send_notifications_controller.rb b/app/controllers/account_reset/send_notifications_controller.rb
@@ -1,5 +1,6 @@
 module AccountReset
   class SendNotificationsController < ApplicationController
+    skip_before_action :verify_authenticity_token
     before_action :authorize
 
     def update