Skip_before_filter when api_key is present

Question

I am trying to create api for my rails application.

I want to skip csrf before the filter when a valid api_key is present in non-get requests.

I tried (I will check api_key as soon as I can get the conditional filter to work)

(skip_before_filter :verify_authenticity_token) if params[:api_key].present? 

But this does not work ...

Any ideas?

Answer 1

I don’t think this might work, because if the expression is evaluated at the time the controller class was created, why params[:api_key].present? is false at this moment ... u can try

skip_before_filter :verify_authenticity_token, :if =>lambda{ params[:api_key].present?}

Answer 2

Rails 3.2.13 -

None of the above solutions worked (maybe I did something wrong?), But it happened:

 skip_before_filter :verify_authenticity_token, :if => :check_auth def check_auth request.headers["authentication_token"] == ENV['AUTH_KEY'] end 

Answer 3

It is not possible to make skip_before_filter conditional. You cannot use 'if' on skip_before_filter.

Answer 4

try it

 skip_before_filter :verify_authenticity_token, :except => [], if params[:api_key].present?