Rails 3 Authenticity Token

Question

Does anyone know how the authenticity token is managed in Ruby on Rails 3? With all the unobtrusive Javascript Ruby on Rails 3 articles showing how the HTML5 data attributes are used I don't see the authenticity token anywhere.

Answer 1

You need to put this in the head section of your layout file(s):

<%= csrf_meta_tag %>

—which outputs:

<meta name="csrf-token" content="<%= form_authenticity_token %>" />
<meta name="csrf-param" content="authenticity_token" />