Trip Trip - 2 years ago 112
Javascript Question

Proper way to send an Authenticity Token with AJAX..?

This works but gets stopped because it lacks an authenticity token:

$.ajax({type: "POST", url: $(this).parent("form").attr("action"), dataType: "script"});
return false;

So I tried adding it like so:

$.ajax({type: "POST", url: $(this).parent("form").attr("action") + "?&authenticity_token=" + AUTH_TOKEN, dataType: "script"});
return false;

And it passes the auth_token correctly as a param, but seems to lose the rest of my form.

Anyways to accomplish both sending the form data that works, and the authenticity token as well?

This is a rails environment. And I have this in my head.

= javascript_tag "var AUTH_TOKEN = '#{form_authenticity_token}';" if protect_against_forgery?

Things I've tried


= hidden_field :authenticity_token, :value => form_authenticity_token


$.ajax({type: "POST", url: $(this).parent("form").attr("action"), dataType: "script", authenticity_token: AUTH_TOKEN});


// Always send the authenticity_token with ajax
$(document).ajaxSend(function(event, request, settings) {
if ( settings.type != 'GET' ) { = ( ? + "&" : "")
+ "authenticity_token=" + encodeURIComponent( AUTH_TOKEN );

Answer Source

Actually, you are reading the action attribute of form and sending a post ajax request to it. to send form data you have to submit the form or you can serialize the form data and send it in ajax request like

      type: "POST", 
      url: $(this).parent("form").attr("action") + "?&authenticity_token=" + AUTH_TOKEN, 
      dataType: "script"
  return false;

Doing this will serialize your form data and send it along with ajax request and authenticity token is already being sent via query string

Recommended from our users: Dynamic Network Monitoring from WhatsUp Gold from IPSwitch. Free Download