tags:

views:

25

answers:

1
+1  Q: 

Rails ActionController::InvalidAuthenticityToken All browsers

Hi, I'm having an issue with one user. No matter what he does he ends up getting throwing an ActionController::InvalidAuthenticityToken error. I have tried having him clear his browser's cache, cookies, etc. He gets this using both FireFox and Internet Explorer. I'm at a loss as to why this would be occurring for just him. Everything I do in every browser works fine.

He is running Windows Vista Home.

Our stack:

  • Ubuntu 9.10
  • Ruby 1.8.7-248
  • Rails 2.3.9
  • Passenger 2.2.11
  • Apache 2.2.12

Thanks!

A: 

Do you use page, action or fragment caching? Be sure you are not caching the authenticity token.

Simone Carletti  2010-10-13 07:39:22
No, I'm not using any caching.
Nick  2010-10-13 13:49:22
My gut is telling me that it was the upgrade to Rails 2.3.9 from 2.3.8, I know there were issues with the Database session store, however we are using the cookie session store.
Nick  2010-10-13 15:21:41
Ok, my gut was wrong. I downgraded to Rails 2.3.8, had the user try again. The problem is stil there.
Nick  2010-10-13 16:47:20

related questions

How do I add a MIME type to .htaccess?
Difference between the Apache HTTP Server and Apache Tomcat?
How do I support SSL Client Certificate authentication?
Why can't I connect to my CAS server with Perl's AuthCAS?
Cleanest & Fastest server setup for Django
Installing Apache Web Server on 64 Bit Mac
Running Apache alongside another web server?
Algorithm behind MD5Crypt
Can you compile Apache HTTP Server and redeploy its binaries to a different location ?
mod_rewrite rule to redirect all requests except for one specific path
How do I create a self signed SSL certificate to use while testing a web app.
Software for Webserver Log Analysis?
What is the difference between an endpoint, a service, and a port when working with webservices?
What are the proper permissions for an upload folder with PHP/Apache?
mod_rewrite to alias one file suffix type to another
How do you redirect HTTPS to HTTP?
Using mod_rewrite to Mimic SSL Virtual Hosts?
User authentication on Resin webserver
How do you set up Python scripts to work in Apache 2.0?
Block user access to internals of a site using HTTP_REFERER
.htaccess directives to *not* redirect certain URLs
How can I get the authenticated user name under Apache using plain HTTP authentication and PHP?
Make XAMPP/Apache serve file outside of htdocs
Apache/PHP: error_log per Virtual Host?
How do I track file downloads with apache/PHP