Rails Facebook iframe應用程序錯誤：InvalidAuthenticityToken

Question

當我訪問我的facebook iframe應用程序時出現此錯誤：

The change you wanted was rejected. 

Maybe you tried to change something you didn't have access to. 

Heroku日誌：

2011-06-05T08:30:41+00:00 app[web.1]: Started POST "/facebook/" for xxxx 
03 at 2011-06-05 10:30:41 +0200 
2011-06-05T08:30:41+00:00 heroku[router]: POST www.vinderhimlen.dk/facebook/ dyn 
o=web.1 queue=0 wait=0ms service=39ms bytes=711 
2011-06-05T08:30:41+00:00 app[web.1]: 
2011-06-05T08:30:41+00:00 app[web.1]: ActionController::InvalidAuthenticityToken 
(ActionController::InvalidAuthenticityToken): 
2011-06-05T08:30:41+00:00 app[web.1]: 
2011-06-05T08:30:41+00:00 app[web.1]: 
2011-06-05T08:30:41+00:00 app[web.1]: 
2011-06-05T08:30:45+00:00 heroku[web.1]: Stopping process with SIGTERM 
2011-06-05T08:30:45+00:00 app[web.1]: >> Stopping ... 
2011-06-05T08:30:45+00:00 heroku[web.1]: Process exited 

Iceberg@ICEBERG-PC /c/rails/konkurranceportalen (master) 
$ 

Answer 1

默認情況下，Rails的要求被列爲令牌每個POST都有一個隱藏字段。

這可以保護您的應用程序免受跨網站請求僞造。

請參閱導軌Request Forgery Protection文檔。

skip_before_filter :verify_authenticity_token對於進一步的調試可能是有用的。