In Rails 4 rc1, remote forms doesn't include the Authenticity Token.

[felipero]

I'm using Rails4 rc1 but got a problem with every single remote form. Looks like they are not including the Authenticity Token when they are remote, using the form_for or the form_tag.

After the submit, we get an InvalidAuthenticityToken, since jquery ujs can't get the token anywhere.

I've created one issue for jquery ujs too.
rails/jquery-ujs#321

[rafaelfranca]

Do you have csrf_meta_tags in your layout/view?

[felipero]

Now I do, and it works as it should. My Bad. Sorry.

[scratchoo]

i have csrf_meta_tags in my layout, but when i disable javascript in the page that contains a remote form i have the error

 ActionController::InvalidAuthenticityToken PersonsController#create

there is a solution for this ?

[firedev]

Is it the new behaviour that Rails4 doesn't work without Javascript?

[rafaelfranca]

No. It works with and without javascript

[firedev]

Well, yes, if you include form token manually. I have read this is the new default behavior.

[rafaelfranca]

Where you read this?

[rafaelfranca]

Just found it:

Changed default value for config.action_view.embed_authenticity_token_in_remote_forms to false. This change breaks remote forms that need to work also without JavaScript, so if you need such behavior, you can either set it to true or explicitly pass authenticity_token: true in form options.

[psaravanan]

thanks its helped me

[qjpioneer]

When I add config.action_view.embed_authenticity_token_in_remote_forms=true to \config\application.rb

and restart rails server ,then an error happened

/Users/haha/railsbridge/railsfun/ruby12weeks/eat/config/application.rb:5:in<top (required)>': undefined local variable or method config' for main:Object (NameError)

Did I put it to wrong place?

[ljromero]

@qjpioneer maybe you place the code in the wrong line.

It works for me in Rails 4.2.8.

[vkeziah]

@rafaelfranca your soultion works for me but my form submitted twice , once for js and other html requests.

Do you have any Idea? I checked ujs file is added only once to the asset pipeline . I am not sure why its submitting twice