R2-3031: Adding prepend option to protect_from_forgery to fix csrf er…

…ror when using idp
fphgov · Sep 25, 2024 · c6c6699 · c6c6699
1 parent d993a5d
commit c6c6699
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/controllers/application_api_controller.rb b/app/controllers/application_api_controller.rb
@@ -15,7 +15,7 @@ class ApplicationApiController < ActionController::API
   before_action :check_config_update_lock!
   before_action :set_csrf_cookie, unless: -> { request_from_basic_auth? }
 
-  protect_from_forgery with: :exception, if: -> { use_csrf_protection? }
+  protect_from_forgery with: :exception, prepend: true, if: -> { use_csrf_protection? }
 
   class << self
     attr_accessor :model_class