Merge a917520 into 3b79f93

app/controllers/graphql_devise/application_controller.rb

@@ -1,4 +1,8 @@
 module GraphqlDevise
   class ApplicationController < DeviseTokenAuth::ApplicationController
+    private
+
+    def verify_authenticity_token
+    end
   end
 end

spec/dummy/app/controllers/api/v1/graphql_controller.rb

@@ -8,6 +8,11 @@ class GraphqlController < ApplicationController
       def graphql
         render json: DummySchema.execute(params[:query])
       end
+
+      private
+
+      def verify_authenticity_token
+      end
     end
   end
 end

spec/dummy/app/controllers/application_controller.rb

@@ -1,2 +1,3 @@
 class ApplicationController < ActionController::Base
+  protect_from_forgery with: :exception
 end

spec/rails_helper.rb

@@ -39,4 +39,8 @@
   config.include(Requests::AuthHelpers, type: :request)
   config.include(ActiveSupport::Testing::TimeHelpers)
   config.include(Generators::FileHelpers, type: :generator)
+
+  config.before(:suite) do
+    ActionController::Base.allow_forgery_protection = true
+  end
 end