fix auth endpoints

app/controllers/registrations_controller.rb

@@ -2,14 +2,30 @@
 
 class RegistrationsController < Devise::RegistrationsController
   respond_to :json
+  protect_from_forgery with: :null_session
+
+  def validation_error(resource)
+    render json: {
+      errors: [
+        {
+          status: '400',
+          title: 'Bad Request',
+          detail: resource.errors,
+          code: '100'
+        }
+      ]
+    }, status: :bad_request
+  end
 
   def create
     build_resource(sign_up_params)
-    if resource.save
-      sign_in(resource)
-      head :created
+    resource.save
+    sign_in(resource)
+
+    if resource.errors.empty?
+      render json: resource
     else
-      render_resource(resource)
+      validation_error(resource)
     end
   end
 end

app/controllers/sessions_controller.rb

@@ -2,7 +2,8 @@
 
 class SessionsController < Devise::SessionsController
   respond_to :json
-
+  protect_from_forgery with: :null_session
+
   private
 
   def respond_with(resource, _opts={})

spec/requests/registrations_spec.rb

@@ -55,12 +55,12 @@
       end
     end
 
-    #describe 'error' do
-    #  it 'responds with error with invalid params' do
-    #    post endpoint, params: invalid_params
-    #    json_response = response.parsed_body
-    #    expect(json_response['errors'][0]['detail'].keys).to match_array(%w[email password password_confirmation])
-    #  end
-    #end
+    describe 'error' do
+      it 'responds to error with message' do
+        post endpoint, params: invalid_params
+        json_response = response.parsed_body
+        expect(json_response['errors'][0]['title']).to eq('Bad Request')
+      end
+    end
   end
 end