diff --git a/app/views/swagger_rails/swagger_ui/index.html.erb b/app/views/swagger_rails/swagger_ui/index.html.erb index 173de52..7f5f7e8 100644 --- a/app/views/swagger_rails/swagger_ui/index.html.erb +++ b/app/views/swagger_rails/swagger_ui/index.html.erb @@ -64,6 +64,14 @@ }); addApiKeyAuthorization(); + + // Send Rails CSRF Token with every request + var csrfToken = new SwaggerClient.ApiKeyAuthorization( + 'X-CSRF-Token', + '<%= form_authenticity_token %>', + 'header' + ); + swaggerUi.api.clientAuthorizations.add('csrf-token', csrfToken); }, onFailure: function(data) { log("Unable to Load SwaggerUI"); diff --git a/lib/generators/swagger_rails/custom_ui/files/index.html.erb b/lib/generators/swagger_rails/custom_ui/files/index.html.erb index c281bec..302d46a 100644 --- a/lib/generators/swagger_rails/custom_ui/files/index.html.erb +++ b/lib/generators/swagger_rails/custom_ui/files/index.html.erb @@ -64,6 +64,14 @@ }); addApiKeyAuthorization(); + + // Send Rails CSRF Token with every request + var csrfToken = new SwaggerClient.ApiKeyAuthorization( + 'X-CSRF-Token', + '<%= form_authenticity_token %>', + 'header' + ); + swaggerUi.api.clientAuthorizations.add('csrf-token', csrfToken); }, onFailure: function(data) { log("Unable to Load SwaggerUI");