diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb index 9893daa..06a23e1 100644 --- a/app/controllers/application_controller.rb +++ b/app/controllers/application_controller.rb @@ -4,7 +4,7 @@ class ApplicationController < ActionController::Base include ExceptionHandler - protect_from_forgery with: :exception, prepend: true + protect_from_forgery with: forgery_method, prepend: true before_action :prepare_exception_notifier before_action :configure_permitted_parameters, if: :devise_controller? @@ -54,6 +54,10 @@ class ApplicationController < ActionController::Base render 'application/page_not_found', status: :not_found end + def forgery_method + Rails.env.production? ? :null_session : :exception + end + protected def configure_permitted_parameters