Merged in r2-3031-idp-csrf (pull request #6939)

R2-3031: Adding prepend option to protect_from_forgery to fix csrf error when using idp
fphgov · Sep 27, 2024 · 24d8f88 · 24d8f88
2 parents 63cb058 + c6c6699
commit 24d8f88
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/controllers/application_api_controller.rb b/app/controllers/application_api_controller.rb
@@ -15,7 +15,7 @@ class ApplicationApiController < ActionController::API
   before_action :check_config_update_lock!
   before_action :set_csrf_cookie, unless: -> { request_from_basic_auth? }
 
-  protect_from_forgery with: :exception, if: -> { use_csrf_protection? }
+  protect_from_forgery with: :exception, prepend: true, if: -> { use_csrf_protection? }
 
   class << self
     attr_accessor :model_class