Always set the XSRF-TOKEN cookie unless the endpoint is configured not to protect against forgery (not just for non-Inertia requests)

Author: jordanhiltunen

lib/inertia_rails/controller.rb

@@ -13,7 +13,7 @@ module Controller
       helper ::InertiaRails::Helper
 
       after_action do
-        cookies['XSRF-TOKEN'] = form_authenticity_token unless request.inertia? || !protect_against_forgery?
+        cookies['XSRF-TOKEN'] = form_authenticity_token unless !protect_against_forgery?
       end
     end