Merge pull request #159 from eagletmt/use-api

Use AC::API to skip CSRF protection in APIs
cookpad · Jan 21, 2025 · a4733ae · a4733ae
2 parents 960f601 + 8045a61
commit a4733ae
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/app/controllers/kuroko2/api/application_controller.rb b/app/controllers/kuroko2/api/application_controller.rb
@@ -1,4 +1,5 @@
-class Kuroko2::Api::ApplicationController < ActionController::Base
+class Kuroko2::Api::ApplicationController < ActionController::API
+  include ActionController::HttpAuthentication::Basic::ControllerMethods
   include Garage::ControllerHelper
 
   before_action :api_authentication