Skip authenticity token checks for Git HTTP

63ed8032 · Jacob Vosmaer · Robert Speicher · 53498e42 · 63ed8032
Commit 63ed8032 authored Jun 08, 2016 by Jacob Vosmaer Committed by Robert Speicher Jun 08, 2016
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

app/controllers/projects/git_http_controller.rb app/controllers/projects/git_http_controller.rb +2 -0

No files found.
--- a/app/controllers/projects/git_http_controller.rb
+++ b/app/controllers/projects/git_http_controller.rb
 class Projects::GitHttpController < Projects::ApplicationController
  attr_reader :user

+  # Git clients will not know what authenticity token to send along
+  skip_before_action :verify_authenticity_token
  skip_before_action :repository
  before_action :authenticate_user
  before_action :ensure_project_found!