Changed request forgery to log out user (like rails 3)

cykod · Nov 29, 2011 · e085b85 · e085b85
1 parent 178b2f6
commit e085b85
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/app/controllers/module_app_controller.rb b/app/controllers/module_app_controller.rb
@@ -122,7 +122,12 @@ def handle_page
     end
 
     self.request_forgery_protection_token ||= :authenticity_token
-    verify_authenticity_token
+    begin 
+      verify_authenticity_token
+    rescue
+      Rails.logger.error("Invalid Token")
+      process_logout
+    end
 
     if params['__VER__']
       @preview = true