Skip to content

Provides CSRF protection on OmniAuth request endpoint on Jets application

License

Notifications You must be signed in to change notification settings

rubyonjets/omniauth-jets_csrf_protection

Repository files navigation

Omniauth - Jets CSRF Protection

Gem Version

BoltOps Badge

BoltOps Learn Badge

This gem provides protection against CVE-2015-9284 (Cross-Site Request Forgery on the request phase when using OmniAuth gem with a Ruby on Jets application) for Jets applications using OmniAuth gem. It achieves this by integrating a CSRF token verifier that leverages the ActionController::RequestForgeryProtection.

This is a fork of cookpad/omniauth-rails_csrf_protection. Credit goes to the original authors of that gem.

About

Provides CSRF protection on OmniAuth request endpoint on Jets application

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages