disable forgery protection for API

simonfranzen · simonfranzen · commit b8f835bb7fbb · 2020-09-12T10:54:56.000+02:00
diff --git a/app/controllers/graphql_controller.rb b/app/controllers/graphql_controller.rb
@@ -4,6 +4,9 @@
 class GraphqlController < ApplicationController
   include Graphql::AuthHelper
 
+  # disable forgery protection for API
+  skip_before_action :verify_authenticity_token
+
   # Executes the graphql request
   def execute
     query, variables, operation_name = read_query_params()
