set credentials to false in cors.rb

scalableinternetservices · Dec 7, 2024 · 33e4866 · 33e4866
1 parent 7ce63f6
commit 33e4866
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/app/controllers/application_controller.rb b/app/controllers/application_controller.rb
@@ -1,5 +1,5 @@
 class ApplicationController < ActionController::Base
-  skip_forgery_protection
+  skip_before_action :verify_authenticity_token
 
   private
 

diff --git a/config/initializers/cors.rb b/config/initializers/cors.rb
@@ -6,6 +6,6 @@
     resource '*',
       headers: :any,
       methods: [:get, :post, :put, :patch, :delete, :options, :head],
-      credentials: true
+      credentials: false
   end
 end