Merge pull request #127 from SuperTux88/csrf-protection

Disable forgery protection for ReceiveController
diaspora · Jul 23, 2022 · 20cbbfe · 20cbbfe
2 parents 15465bf + 8a8678c
commit 20cbbfe
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/app/controllers/diaspora_federation/receive_controller.rb b/app/controllers/diaspora_federation/receive_controller.rb
@@ -5,6 +5,8 @@
 module DiasporaFederation
   # This controller processes receiving messages.
   class ReceiveController < ApplicationController
+    skip_forgery_protection
+
     # Receives public messages
     #
     # POST /receive/public

diff --git a/spec/spec_helper.rb b/spec/spec_helper.rb
@@ -50,7 +50,11 @@
     expect_config.syntax = :expect
   end
 
-  unless defined?(::Rails)
+  if defined?(::Rails)
+    config.before(:each, type: :controller) do
+      ActionController::Base.allow_forgery_protection = true
+    end
+  else
     config.exclude_pattern = "**/controllers/**/*_spec.rb, **/routing/**/*_spec.rb"
     config.filter_run_excluding rails: true
   end