fatfreecrm/fat_free_crm · error · ActionController::InvalidAuthenticityToken

ActionController::InvalidAuthenticityToken

Error message

ActionController::InvalidAuthenticityToken

What it means

Error "ActionController::InvalidAuthenticityToken" thrown in fatfreecrm/fat_free_crm.

Source

Thrown at app/controllers/application_controller.rb:82

  rescue_from ArgumentError do |exception|
    if request.format.html? && exception.message == "invalid base64"
      request.reset_session
      redirect_to login_path
    else
      raise(exception)
    end
  end

  private

  #
  # In rails 3, the default behaviour for handle_unverified_request is to delete the session
  # and continue executing the request. However, we use cookie based authentication and need
  # to halt proceedings. In Rails 4, use "protect_from_forgery with: :exception"
  # See http://blog.nvisium.com/2014/09/understanding-protectfromforgery.html for more details.
  #----------------------------------------------------------------------------
  def handle_unverified_request
    raise ActionController::InvalidAuthenticityToken unless ENV.fetch('CODESPACE_NAME', nil) && Rails.env.development?
  end

  #
  # Takes { related: 'campaigns/7' } or { related: '5' }
  #   and returns array of object ids that should be excluded from search
  #   assumes controller_name is a method on 'related' class that returns a collection
  #----------------------------------------------------------------------------
  def auto_complete_ids_to_exclude(related)
    return [] if related.blank?
    return [related.to_i].compact unless related.index('/')

    related_class, id = related.split('/')
    obj = related_class.classify.constantize.find_by_id(id)
    if obj&.respond_to?(controller_name)
      obj.send(controller_name).map(&:id)
    else
      []
    end

View on GitHub (pinned to 3bb64ca0d5)

When it happens

Trigger: Thrown at app/controllers/application_controller.rb:82 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of fatfreecrm/fat_free_crm@3bb64ca0d5 (2026-08-23). Data as JSON: /api/errors/87b0ce086b0d4159. Report an issue: GitHub.