mirror of
https://github.com/standardnotes/app
synced 2026-01-16 19:04:58 -05:00
28 lines
664 B
Ruby
28 lines
664 B
Ruby
class ApplicationController < ActionController::Base
|
|
include DeviseTokenAuth::Concerns::SetUserByToken
|
|
# Prevent CSRF attacks by raising an exception.
|
|
# For APIs, you may want to use :null_session instead.
|
|
|
|
protect_from_forgery with: :null_session
|
|
after_action :set_csrf_cookie
|
|
|
|
layout :false
|
|
|
|
def frontend
|
|
set_app_domain
|
|
end
|
|
|
|
rescue_from ActionView::MissingTemplate do |exception|
|
|
end
|
|
protected
|
|
|
|
def set_app_domain
|
|
@appDomain = request.domain
|
|
@appDomain << ':' + request.port.to_s unless request.port.blank?
|
|
end
|
|
def set_csrf_cookie
|
|
cookies['XSRF-TOKEN'] = form_authenticity_token if protect_against_forgery?
|
|
end
|
|
|
|
end
|