verify_authenticity_token in Rails 4.2 and above

[vladimir-e]

Hi everyone who might be interested,

This example project was very helpful to me, to integrate panda into my project. But recently I updated it to Rails 4.2.4 and this piece of code stopped working:

  def verify_authenticity_token
    handle_unverified_request unless (form_authenticity_token == upload_payload['csrf'])
  end

See panda_controller.rb

I found out that csrf verification API changed a bit and now it should be:

  def verify_authenticity_token
    handle_unverified_request unless valid_authenticity_token?(session, upload_payload['csrf'])
  end

Hope it will be helpful for someone.

Thanks to this answer on SO