Skip to content
Menu
Justin Ball
  • About
  • Privacy Policy
Justin Ball

Category: protect_from_forgery

secret given to the #protect_from_forgery call

Posted on February 7, 2008October 25, 2021

My code was running fine under Rails 2.0.2. Then I enabled the db based session store by uncommenting this: config.action_controller.session_store = :active_record_store </pre> in environment.rb. Anything that used the session after that gave me this error: No :secret given to the #protect_from_forgery call. Set that or use a session store capable of generating its own…

©2025 Justin Ball | Powered by SuperbThemes & WordPress