Unfloyded/Legamunt
0
0
Fork 0
Code Activity

Improve web api protect (#6343)

Browse source
This commit is contained in:
abcang 2018-04-17 22:23:46 +09:00 • committed by Eugen Rochko
parent 204d72fbe4
commit 897199910f
6 changed files with 18 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

9
app/controllers/api/web/base_controller.rb Normal file
View file

@ -0,0 +1,9 @@
# frozen_string_literal: true
class Api::Web::BaseController < Api::BaseController
protect_from_forgery with: :exception
rescue_from ActionController::InvalidAuthenticityToken do
render json: { error: "Can't verify CSRF token authenticity." }, status: 422
end
end

2
app/controllers/api/web/embeds_controller.rb
View file

@ -1,6 +1,6 @@
# frozen_string_literal: true
class Api::Web::EmbedsController < Api::BaseController
class Api::Web::EmbedsController < Api::Web::BaseController
respond_to :json
before_action :require_user!

3
app/controllers/api/web/push_subscriptions_controller.rb
View file

@ -1,10 +1,9 @@
# frozen_string_literal: true
class Api::Web::PushSubscriptionsController < Api::BaseController
class Api::Web::PushSubscriptionsController < Api::Web::BaseController
respond_to :json
before_action :require_user!
protect_from_forgery with: :exception
def create
active_session = current_session

2
app/controllers/api/web/settings_controller.rb
View file

@ -1,6 +1,6 @@
# frozen_string_literal: true
class Api::Web::SettingsController < Api::BaseController
class Api::Web::SettingsController < Api::Web::BaseController
respond_to :json
before_action :require_user!