# ActionController::InvalidAuthenticityToken not thrown in Windows

**URL:** <https://www.ruby-forum.com/t/actioncontroller-invalidauthenticitytoken-not-thrown-in-windows/132658>\
**Category:** Rails\
**Created:** [March 22, 2008, 6:57pm UTC](https://www.ruby-forum.com/t/actioncontroller-invalidauthenticitytoken-not-thrown-in-windows/132658 "2008-03-22T18:57:45Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![apramanik](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/e9a140/32.png) [@apramanik](https://www.ruby-forum.com/u/apramanik)\
**Post date:** [March 22, 2008, 6:57pm UTC](https://www.ruby-forum.com/t/actioncontroller-invalidauthenticitytoken-not-thrown-in-windows/132658/1 "2008-03-22T18:57:45Z")

</div>

Hi all,

I’m getting some weird behavior. I’m developing on two machines, one  
with os x and the other with windows xp. I was testing one of my  
registration forms and it worked fine when mongrel\_rails was run on  
the windows machine, but when mongrel was run on os x it kept throwing  
“ActionController::InvalidAuthenticityToken”. I realized I had  
forgotten the \<%= token\_tag %\>, but it’s worrisome that when the  
server was run on xp it took the form happily. What’s going on?  
Thanks!

Abhik

---

<div class="post-metadata">

**Author:** ![apramanik](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/e9a140/32.png) [@apramanik](https://www.ruby-forum.com/u/apramanik)\
**Post date:** [March 22, 2008, 7:03pm UTC](https://www.ruby-forum.com/t/actioncontroller-invalidauthenticitytoken-not-thrown-in-windows/132658/2 "2008-03-22T19:03:45Z")

</div>

I’m using Ruby 1.8.6, Rails 2.0.2, and Mongrel 1.1.3

---

<div class="post-metadata">

**Author:** ![apramanik](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/e9a140/32.png) [@apramanik](https://www.ruby-forum.com/u/apramanik)\
**Post date:** [March 22, 2008, 7:04pm UTC](https://www.ruby-forum.com/t/actioncontroller-invalidauthenticitytoken-not-thrown-in-windows/132658/3 "2008-03-22T19:04:20Z")

</div>

Mongrel 1.1.2 on windows

---

<div class="post-metadata">

**Author:** ![apramanik](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/a/e9a140/32.png) [@apramanik](https://www.ruby-forum.com/u/apramanik)\
**Post date:** [March 24, 2008, 3:12pm UTC](https://www.ruby-forum.com/t/actioncontroller-invalidauthenticitytoken-not-thrown-in-windows/132658/4 "2008-03-24T15:12:56Z")

</div>

Not sure what issue you’re facing. I get the authenticity token  
thrown when expected on my WinXP machines.