Class: ActionController::RequestForgeryProtection::ProtectionMethods::NullSession

Inherits:
Object
  • Object
show all
Defined in:
lib/action_controller/metal/request_forgery_protection.rb

Defined Under Namespace

Classes: NullCookieJar, NullSessionHash

Instance Method Summary collapse

Constructor Details

#initialize(controller) ⇒ NullSession

Returns a new instance of NullSession.



234
235
236
 
# File 'lib/action_controller/metal/request_forgery_protection.rb', line 234

def initialize(controller)
  @controller = controller
end

Instance Method Details

#handle_unverified_request ⇒ Object

This is the method that defines the application behavior when a request is found to be unverified.



239
240
241
242
243
244
245
 
# File 'lib/action_controller/metal/request_forgery_protection.rb', line 239

def handle_unverified_request
  request = @controller.request
  request.session = NullSessionHash.new(request)
  request.flash = nil
  request.session_options = { skip: true }
  request.cookie_jar = NullCookieJar.build(request, {})
end