How do I ignore the authenticity token for specific actions in Rails?

Question

When I have a specific action that I don't want to check the authenticity token on, how do I tell Rails to skip checking it?

Answer 1

For individual actions, you can do:

protect_from_forgery :only => [:update, :delete, :create]
#or
protect_from_forgery :except => [:update, :delete, :create]

For an entire controller, you can do:

skip_before_filter :verify_authenticity_token