Is there a difference between <code>request.cookies</code> and <code>cookies</code> object in Ruby on Rails? I am currently trying to send a request with a cookie from my node.js server to my ROR4 application. It seems that in the ROR application, <code>request.cookies</code> contains the cookie that I am sending however <code>cookies</code> object (on which existing logic is based) do not have it. I have searched the docs but was not able to find anything relevant. Is there something that I have missed? Any help is appreciated.

Ideally, <code>request.cookies</code> and <code>cookies</code> should be the same. However, in POST (create action) requests, rails verifies the XSRF token. If that verification fails, the cookies from <code>request.cookies</code> are not available in the <code>request.cookie_jar</code>. Which means, they are not available via the <code>cookies</code> method. To identify if the cookies mismatch is because of the XSRF token missing. In your request, try to identify the class of your cookie hash. <code>cookies.hash</code> should return you <code>ActionDispatch::Cookies::CookieJar</code>. If it instead returns <code>ActionController::RequestForgeryProtection::ProtectionMethods::NullSession::NullCookieJar</code>, you have a XSRF token mismatch. This scenario is likely to happen when you make these calls via javascript which don't by default pick the XSRF token and send with the request. See the answer here: https://stackoverflow.com/a/8175979/976880 to learn how to fix it.

What is the difference between request.cookies and cookies in a controller?

Tags:

ruby

ruby-on-rails-4

Is there a difference between request.cookies and cookies object in Ruby on Rails?

I am currently trying to send a request with a cookie from my node.js server to my ROR4 application. It seems that in the ROR application, request.cookies contains the cookie that I am sending however cookies object (on which existing logic is based) do not have it.

I have searched the docs but was not able to find anything relevant. Is there something that I have missed? Any help is appreciated.

895

asked Jun 06 '16 12:06

Vedanshu

1 Answers

Ideally, request.cookies and cookies should be the same. However, in POST (create action) requests, rails verifies the XSRF token. If that verification fails, the cookies from request.cookies are not available in the request.cookie_jar. Which means, they are not available via the cookies method.

To identify if the cookies mismatch is because of the XSRF token missing. In your request, try to identify the class of your cookie hash. cookies.hash should return you ActionDispatch::Cookies::CookieJar. If it instead returns ActionController::RequestForgeryProtection::ProtectionMethods::NullSession::NullCookieJar, you have a XSRF token mismatch.

This scenario is likely to happen when you make these calls via javascript which don't by default pick the XSRF token and send with the request. See the answer here: https://stackoverflow.com/a/8175979/976880 to learn how to fix it.

answered Oct 06 '22 17:10

aBadAssCowboy

Related questions
                            
                                Ruby: yield block from a block?
                            
                                What are all the "conventions" for Ruby on Rails? [closed]
                            
                                validation before attribute setters can type cast
                            
                                Executing JavaScript from a Cucumber/Capybara test
                            
                                What is the run time of shift/unshift in a ruby array
                            
                                How to attach the Rubymine IDE debugger to a shell process?
                            
                                Using Watir-webdriver how to check the URL of a page
                            
                                Force SSL for specific routes in Rails 3.1
                            
                                how to call a active record named scope with a string
                            
                                Rails s return: [BUG] Segmentation fault
                            
                                RSpec shorter backtrace output for test failures
                            
                                Where to put helper functions for rake tasks and test files in Ruby on Rails?
                            
                                How can I make a non-blocking request for an exclusive lock using File#flock?
                            
                                What does ["string"].pack('H*') mean?
                            
                                Rails CanCan gem refactoring Ability class
                            
                                How do I get values from a ActiveRecord CollectionProxy?
                            
                                Remove a method only from an instance
                            
                                Throttle # of requests per user (with rack-attack & devise)
                            
                                What's the preferred way to dump a JSON object? to_json, JSON.generate or JSON.dump?
                            
                                Rails ActiveRecord - update_all: how to update multiple fields at once with mixed type of arguments

Donate For Us

If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!

Donate Us With