sudo a2enmod mod_rewrite

Is:

sudo a2enmod rewrite

1 - my first idea - Have an Ajax.Responder function in the head of the applications base layout. This would capture any (and all) Ajax requests and modify their parameters to append the authenticity token. What is awful about it is that even GET requests will have the authenticity token when they don’t need it but it’s really not all that big of a deal.

2 - Use something like this:

var AJ = {
rails_gen_token:function() {

var tok_str=”authenticity_token=” + “”;

return tok_str

}
}

And manually (or via a nice regex gsub find all Ajax requests in the js files and prepend the generated token to their parameters.

I think the second one will actually work and I’ll try it tonight then report back with results.

If you’re talking about doing it for every Ajax request across a site without having to use a helper like I use here, then I’m afraid you might have to modify Prototype’s Ajax library to allow for it. I’m not sure though, and that’s dangerous to do.

Keep us posted, especially if you figure out a solution. If I come across something that works, I’ll update this.

I’m trying to come up with a way to globally prepend a valid authenticity token to ajax requests (using Ajax.Options most likely) but can’t find a good way to accomplish this.