[Facebooker-talk] forgery Protection

[Mike Mangino]

I would disable forgery protection for everything. Can you paste in  
your application controller? It looks like the problem may be there.

Mike

On Aug 21, 2008, at 9:18 AM, Dara wrote:

> Has anybody solved this issue. [ http://rubyforge.org/pipermail/facebooker-talk/2008-April/000552.html 
>  ] ?
>
> NameError (undefined local variable or method `controller' for  
> #<LeaveController:0xb7144abc>):
>   /app/controllers/application.rb:24:in `verify_authenticity_token'
>   /home/dara/apps/ruby-1.8.6/lib/ruby/gems/1.8/gems/ 
> activesupport-2.1.0/lib/active_support/callbacks.rb:173:in `send'
>   /home/dara/apps/ruby-1.8.6/lib/ruby/gems/1.8/gems/ 
> activesupport-2.1.0/lib/active_support/callbacks.rb:173:in  
> `evaluate_method'
>   /home/dara/apps/ruby-1.8.6/lib/ruby/gems/1.8/gems/ 
> activesupport-2.1.0/lib/active_support/callbacks.rb:161:in `call'
>   /home/dara/apps/ruby-1.8.6/lib/ruby/gems/1.8/gems/actionpack-2.1.0/ 
> lib/action_controller/filters.rb:430:in `call'
>   /home/dara/apps/ruby-1.8.6/lib/ruby/gems/1.8/gems/actionpack-2.1.0/ 
> lib/action_controller/filters.rb:592:in `run_before_filters'
>   /home/dara/apps/ruby-1.8.6/lib/ruby/gems/1.8/gems/actionpack-2.1.0/ 
> lib/action_controller/filters.rb:578:in `call_filters'
>   /home/dara/apps/ruby-1.8.6/lib/ruby/gems/1.8/gems/actionpack-2.1.0/ 
> lib/action_controller/filters.rb:573:in  
> `perform_action_without_benchmark'
>   /home/dara/apps/ruby-1.8.6/lib/ruby/gems/1.8/gems/actionpack-2.1.0/ 
> lib/action_controller/benchmarking.rb:68:in  
> `perform_action_without_rescue'
>   /home/dara/apps/ruby-1.8.6/lib/ruby/1.8/benchmark.rb:293:in  
> `measure'
>
> I don't have the secret commented in the environment either.
>
> Should I be trying to disable forgery protection for certain calls  
> from facebook/bebo ?
>
> Cheers
> _______________________________________________
> Facebooker-talk mailing list
> Facebooker-talk at rubyforge.org
> http://rubyforge.org/mailman/listinfo/facebooker-talk

--
Mike Mangino
http://www.elevatedrails.com