Everybody hates CSRF

• omniauth-apple

  3 254 0.0 Ruby

  OmniAuth strategy for Sign In with Apple

We've run into some issues where the cookie that manages our session isn't available, therefore breaking checks 2 & 3 mentioned above. If interested, this issue has the most in-detail conversation on that problem specific to our case.

• omniauth-oauth2

  3 493 4.1 Ruby

  An abstract OAuth2 strategy for OmniAuth.

  

Omniauth-OAuth checks for a state value sent in with the request that should be available within the session when the callback is performed (source here)

• Scout Monitoring

  www.scoutapm.com featured

  Rennaisance engineers rejoice! 1 gem 5 min to app monitoring. 5-minute onboarding. No sales team. Devs in the support channels. No DevOps team required. Get the free app insights every engineer deserves with Scout Monitoring.

  

• Ruby on Rails

  478 55,048 10.0 Ruby

  Ruby on Rails

  

Action Pack checks the ORIGIN header of POST requests so they are required to match the website's own domain, i.e. request.base_url (source here)

Suggest a related project